← WordPress Vulnerabilities
WordPress security by component

cab-fare-calculator

cab-fare-calculator is a WordPress component with 3 published CVE records in this archive. The latest tracked vulnerability was published May 10, 2026; the highest CVE/CNA score is 9.8.

Plugin slug: cab-fare-calculator

CVE-2022-50954: cab-fare-calculator: Filesystem traversal

cab-fare-calculator is affected by filesystem traversal. The vulnerable path is reachable without authentication. A crafted path can escape the intended directory and reach files or directories elsewhere on the server. The published affected range is 1.0.3.

PublishedMay 10, 2026
Safe version guidanceSee mitigation notes
Safe version
May 10, 2026 CVE-2022-50954
cab-fare-calculator: Filesystem traversal
cab-fare-calculator is affected by filesystem traversal. The vulnerable path is reachable without authentication. A crafted path can escape the intended directory and reach files or directories elsewhere on the server. The published affected range is 1.0.3.
See mitigation notes
CVE6.9
NVDPending
Sep 05, 2024 CVE-2022-3556
Cab fare calculator: Cross-site scripting
Cab fare calculator is affected by cross-site scripting. Exploitation requires an authenticated WordPress account. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE4.4
NVD4.8
Apr 25, 2022 CVE-2022-1391
Cab fare calculator: Filesystem traversal
Cab fare calculator is affected by filesystem traversal. Exposure depends on how the affected operation is made reachable by the site. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.
See mitigation notes
CVE9.8
NVD9.8