Vulnerability index

Browse CVEs

9 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Canto CRITICAL 9.8
CVE-2024-4936

The Canto plugin for WordPress is vulnerable to Remote File Inclusion in all versions up to, and including, 3.0.8 via the abspath parameter. This mak…

Fix: 3.0.9+
Fix from $2,300 2024-06-14
Canto CRITICAL 9.8
CVE-2024-25096

Improper Control of Generation of Code ('Code Injection') vulnerability in Canto Inc. Canto allows Code Injection.This issue affects Canto: from n/a …

Fix: after 3.0.7
Fix from $2,300 2024-04-03
Canto CRITICAL 9.8
CVE-2023-3452EPSS 7%

The Canto plugin for WordPress is vulnerable to Remote File Inclusion in versions up to, and including, 3.0.4 via the 'wp_abspath' parameter. This al…

Fix: after 3.0.4
Fix from $2,300 2023-08-12
Canto CRITICAL 9.8
CVE-2022-40305

A Server-Side Request Forgery issue in Canto Cumulus through 11.1.3 allows attackers to enumerate the internal network, overload network resources, a…

Fix: after 11.1.3
Fix from $2,300 2022-09-09
Canto MEDIUM 5.3
CVE-2020-28976EPSS 28%

The Canto plugin 1.3.0 for WordPress contains a blind SSRF vulnerability. It allows an unauthenticated attacker can make a request to any internal an…

No fix yet
Fix from $1,600 2020-11-30
Canto MEDIUM 5.3
CVE-2020-28977EPSS 15%

The Canto plugin 1.3.0 for WordPress contains blind SSRF vulnerability. It allows an unauthenticated attacker can make a request to any internal and …

No fix yet
Fix from $1,600 2020-11-30
Canto MEDIUM 5.3
CVE-2020-28978EPSS 15%

The Canto plugin 1.3.0 for WordPress contains blind SSRF vulnerability. It allows an unauthenticated attacker can make a request to any internal and …

No fix yet
Fix from $1,600 2020-11-30
Canto HIGH 7.2
CVE-2020-24063

The Canto plugin 1.3.0 for WordPress allows includes/lib/download.php?subdomain= SSRF.

Mitigation only
Fix from $1,950 2020-11-10
Canto Curses HIGH 7.5
CVE-2013-7416

canto_curses/guibase.py in Canto Curses before 0.9.0 allows remote feed servers to execute arbitrary commands via shell metacharacters in a URL in a …

Fix: after 0.9.0
Fix from $1,950 2014-12-03