Login Request a demo
CA
Product
Canto
by Canto · last CVE Jun 14, 2024
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 4High 1Medium 3Low 0
Severity
All severities8Critical4High1Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Canto to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-4936
9.8
1%
Jun 14
Canto <= 3.0.8 - Unauthenticated Remote File Inclusion
Affected: before 3.0.9
CVE-2024-25096
9.8
1%
Apr 3
Improper Control of Generation of Code ('Code Injection') vulnerability in Canto Inc
Affected: through 3.0.7
CVE-2023-3452
9.8
7%
Aug 12
The Canto plugin for WordPress is vulnerable to Remote File Inclusion in versions up to, and including, 3.0.4 via the 'wp_abspath' parameter
Affected: through 3.0.4
CVE-2022-40305
9.8
2%
Sep 9
A Server-Side Request Forgery issue in Canto Cumulus through 11.1.3 allows attackers to enumerate the internal network, overload network resources, and possibly have unspecified…
Affected: through 11.1.3
CVE-2020-24063
7.2
1%
Nov 10
The Canto plugin 1.3.0 for WordPress allows includes/lib/download.php?subdomain= SSRF
Affected: 1.3.0
CVE-2020-28978
5.3
15%
Nov 30
The Canto plugin 1.3.0 for WordPress contains blind SSRF vulnerability
Affected: 1.3.0
CVE-2020-28977
5.3
15%
Nov 30
The Canto plugin 1.3.0 for WordPress contains blind SSRF vulnerability
Affected: 1.3.0
CVE-2020-28976
5.3
28%
Nov 30
The Canto plugin 1.3.0 for WordPress contains a blind SSRF vulnerability
Affected: 1.3.0
Showing 8