Browse CVEs

CRITICAL 9.8 CVE-2024-4936 The Canto plugin for WordPress is vulnerable to Remote File Inclusion in all versions up to, and including, 3.0.8 via the abspath parameter. This mak… Canto 3.0.9+ Fix from $2,3002024-06-14 CRITICAL 9.8 CVE-2024-25096 Improper Control of Generation of Code ('Code Injection') vulnerability in Canto Inc. Canto allows Code Injection.This issue affects Canto: from n/a … Canto after 3.0.7 Fix from $2,3002024-04-03 CRITICAL 9.8 CVE-2023-3452EPSS 7% The Canto plugin for WordPress is vulnerable to Remote File Inclusion in versions up to, and including, 3.0.4 via the 'wp_abspath' parameter. This al… Canto after 3.0.4 Fix from $2,3002023-08-12 CRITICAL 9.8 CVE-2022-40305 A Server-Side Request Forgery issue in Canto Cumulus through 11.1.3 allows attackers to enumerate the internal network, overload network resources, a… Canto after 11.1.3 Fix from $2,3002022-09-09 MEDIUM 5.3 CVE-2020-28976EPSS 28% The Canto plugin 1.3.0 for WordPress contains a blind SSRF vulnerability. It allows an unauthenticated attacker can make a request to any internal an… Canto No fix yet Fix from $1,6002020-11-30 MEDIUM 5.3 CVE-2020-28977EPSS 15% The Canto plugin 1.3.0 for WordPress contains blind SSRF vulnerability. It allows an unauthenticated attacker can make a request to any internal and … Canto No fix yet Fix from $1,6002020-11-30 MEDIUM 5.3 CVE-2020-28978EPSS 15% The Canto plugin 1.3.0 for WordPress contains blind SSRF vulnerability. It allows an unauthenticated attacker can make a request to any internal and … Canto No fix yet Fix from $1,6002020-11-30 HIGH 7.2 CVE-2020-24063 The Canto plugin 1.3.0 for WordPress allows includes/lib/download.php?subdomain= SSRF. Canto Mitigation only Fix from $1,9502020-11-10 HIGH 7.5 CVE-2013-7416 canto_curses/guibase.py in Canto Curses before 0.9.0 allows remote feed servers to execute arbitrary commands via shell metacharacters in a URL in a … Canto Curses after 0.9.0 Fix from $1,9502014-12-03