CVE-2022-1391
9.8
CRITICAL · CVSS 3.1 · EPSS 15.1% (pctl 97)
Patch early
EPSS 15.1% — above the 10% action threshold.
Description
The Cab fare calculator WordPress plugin before 1.0.4 does not validate the controller parameter before using it in require statements, which could lead to Local File Inclusion issues.
Scoring
| CVSS | 9.8 (CRITICAL, v3.1) |
|---|---|
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 15.06% — more likely to be exploited than 97% of all CVEs |
| Weakness | CWE-22 |
| On CISA KEV | no |
| Public exploit | none known |
| Published | 2022-04-25 |
| Last modified | 2026-06-17 |
Affected (1)
| Vendor | Product |
|---|---|
| kanev | cab fare calculator |
References
→ the Explorer · watch your stack · NVD