Canto
2 CVEs across 2 Canto products. Browse Canto vulnerabilities, severities, and proof-of-concept exploits.
Canto products with known CVEs
Canto CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2024-4936 | Critical | 9.8 | 2024-06-14 | The Canto plugin for WordPress is vulnerable to Remote File Inclusion in all versions up to, and including, 3.0.8 via the abspath parameter. This makes it poss… |
CVE-2024-25096 | Critical | 10.0 | 2024-04-03 | Improper Control of Generation of Code ('Code Injection') vulnerability in Canto Inc. Canto allows Code Injection.This issue affects Canto: from n/a through 3… |
CVE-2023-3452 | Critical | 9.8 | 2023-08-12 | The Canto plugin for WordPress is vulnerable to Remote File Inclusion in versions up to, and including, 3.0.4 via the 'wp_abspath' parameter. This allows unaut… |
CVE-2022-40305 | Critical | 9.8 | 2022-09-09 | A Server-Side Request Forgery issue in Canto Cumulus through 11.1.3 allows attackers to enumerate the internal network, overload network resources, and possibl… |
CVE-2020-28978 | Medium | 5.3 | 2020-11-30 | The Canto plugin 1.3.0 for WordPress contains blind SSRF vulnerability. It allows an unauthenticated attacker can make a request to any internal and external s… |
CVE-2020-28977 | Medium | 5.3 | 2020-11-30 | The Canto plugin 1.3.0 for WordPress contains blind SSRF vulnerability. It allows an unauthenticated attacker can make a request to any internal and external s… |
CVE-2020-28976 | Medium | 5.3 | 2020-11-30 | The Canto plugin 1.3.0 for WordPress contains a blind SSRF vulnerability. It allows an unauthenticated attacker can make a request to any internal and external… |
CVE-2020-24063 | High | 7.2 | 2020-11-10 | The Canto plugin 1.3.0 for WordPress allows includes/lib/download.php?subdomain= SSRF. |
CVE-2013-7416 | | | 2014-12-03 | canto_curses/guibase.py in Canto Curses before 0.9.0 allows remote feed servers to execute arbitrary commands via shell metacharacters in a URL in a feed. |