CVE-2022-50954CWE-98

WordPress Plugin cab-fare-calculator 1.0.3 Local File Inclusion

Medium · published May 10, 2026

CVSS v4.0
6.9
EPSS
0%
Percentile
31.4
In the wild
Unconfirmed
What it is

WordPress Plugin cab-fare-calculator 1.0.3 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the controller parameter in tblight.php. Attackers can supply path traversal sequences through the controller GET parameter to include arbitrary files outside the intended controllers directory.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00385 · 31.4th percentile
Weakness
CWE-98 · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')
Published
2026-05-10T12:12Z
EPSS history
Timeline
  • 10 MAY 12:12Z
    WordPress Plugin cab-fare-calculator 1.0.3 Local File Inclusion
    cvelistv5