Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: kanev Clear all filters
TI-2022-03273 CVE-2022-3556 · GHSA-3225-4cfr-jmrx

Cab fare calculator <= 1.1.6 - Authenticated (Admin+) Stored Cross-Site Scripting

Priority LOW 24

The Cab fare calculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the vehicle title setting in versions up to, and including, 1.1.6 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00318 Published 2024-09-05 No fix listed CWE-79
TI-2022-01272 CVE-2022-1391 · GHSA-ccvg-rxc2-rf77

Cab fare calculator < 1.0.4 - Unauthenticated LFI

Priority MEDIUM 58

The Cab fare calculator WordPress plugin before 1.0.4 does not validate the controller parameter before using it in require statements, which could lead to Local File Inclusion issues.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.15064 Published 2022-04-25 Fixed in 1.0.4 CWE-22