Vulnerability · Published May 10, 2026 · Assigned by VulnCheck

CVE-2022-50954WordPress Plugin cab-fare-calculator 1.0.3 Local File Inclusion

Medium 6.2

In plain English

A medium-severity security flaw in cab-fare-calculator from cab-fare-calculator. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 33% of all known vulnerabilities).

Severity (CVSS 3.1)6.2Medium

Exploit odds (30 days)0.4%top 67.2% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

WordPress Plugin cab-fare-calculator 1.0.3 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the controller parameter in tblight.php. Attackers can supply path traversal sequences through the controller GET parameter to include arbitrary files outside the intended controllers directory.

Affected products (as reported)

Vendor	Product	Versions
cab-fare-calculator	cab-fare-calculator	1.0.3

Weakness: CWE-98 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References

ExploitDB-50843 exploit
Official Product Homepage product
VulnCheck Advisory: WordPress Plugin cab-fare-calculator 1.0.3 Local File Inclusion third-party-advisory