Flightbycanto

4 CVEs across 1 Flightbycanto products. Browse Flightbycanto vulnerabilities, severities, and proof-of-concept exploits.

Flightbycanto products with known CVEs

ProductCVEs
Canto4
Flightbycanto CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-6441Medium4.32026-04-17The Canto plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 3.1.1. This is due to the absence of any capability check…
CVE-2026-3335Medium5.32026-03-21The Canto plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.1.1 via the `/wp-content/plugins/canto/includes/l…
CVE-2024-4936Critical9.82024-06-14The Canto plugin for WordPress is vulnerable to Remote File Inclusion in all versions up to, and including, 3.0.8 via the abspath parameter. This makes it poss…
CVE-2023-3452Critical9.82023-08-12The Canto plugin for WordPress is vulnerable to Remote File Inclusion in versions up to, and including, 3.0.4 via the 'wp_abspath' parameter. This allows unaut…