Medium severity6.2NVD Advisory· Published May 10, 2026· Updated May 26, 2026

CVE-2022-50954

Description

WordPress Plugin cab-fare-calculator 1.0.3 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the controller parameter in tblight.php. Attackers can supply path traversal sequences through the controller GET parameter to include arbitrary files outside the intended controllers directory.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Cab Fare Calculatorreferences2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <=1.0.3
Package: https://wordpress.org/plugins/cab-fare-calculator

Patches

Vulnerability mechanics

References

wordpress.org/plugins/cab-fare-calculator/nvd
www.exploit-db.com/exploits/50843nvd
www.vulncheck.com/advisories/wordpress-plugin-cab-fare-calculator-local-file-inclusionnvd

News mentions

No linked articles in our index yet.

cvss	0.403
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000