CVE-2022-1391

The Cab fare calculator WordPress plugin (versions before 1.0.4 ) is vulnerable to Local File Inclusion (LFI) . This issue is caused by the plugin's failure to validate the controller parameter before using it in require statements. An attacker can exploit this to read sensitive files on the serv...

CVE-2022-3556

CVE-2022-3556 affects the WordPress plugin Cab fare calculator up to version 1.1.6. The vulnerability is a Stored Cross-Site Scripting (XSS) via the vehicle title setting caused by insufficient input sanitization and output escaping. Exploitation requires authenticated access with administrator p...