nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2022-50954 CVE-2022-50954
MEDIUM
WordPress Plugin cab-fare-calculator 1.0.3 Local File Inclusion
Record summary
CVE-2022-50954 has a selected CVSS score of 6.9 (medium); EIP currently links 1 catalogued exploit.
Description
WordPress Plugin cab-fare-calculator 1.0.3 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the controller parameter in tblight.php. Attackers can supply path traversal sequences through the controller GET parameter to include arbitrary files outside the intended controllers directory.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
CISA SSVC decision
ExploitationPoC
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated May 11, 2026 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
cab-fare-calculatorBrowse cab-fare-calculator / cab-fare-calculator | CVE List | 1.0.3 | affected |
Proofs of concept
1Catalogued exploits
ExploitDBWordPress Plugin cab-fare-calculator 1.0.3 - Local File InclusionExploitDB exploitby Hassan Khan YusufzaiNot analyzed1 file
References
4Official Product Homepageproduct
https://wordpress.org/plugins/cab-fare-calculator ExploitDB-50843exploit
https://www.exploit-db.com/exploits/50843 VulnCheck Advisory: WordPress Plugin cab-fare-calculator 1.0.3 Local File InclusionThird-party advisory
https://www.vulncheck.com/advisories/wordpress-plugin-cab-fare-calculator-local-file-inclusion