Access violation vulnerability in E-cab Taxi Booking Manager for Woocommerce 1.3.0

A plugin called “E-cab” for WordPress, which manages taxi bookings, has a security issue that could allow someone to gain more privileges than they should have. This can happen in all versions of the plugin, up to version 1.3.0. The problem is that the plugin doesn’t check a user’s permissions before letting them change a setting or their own information, like their email address. This means that someone who isn’t logged in could change an administrator’s email address, and then use that to reset their password and access their account.