Login Request a demo
CA
Product
Canto
by Canto · last CVE Jun 14, 2024
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 4High 1Medium 3Low 0
Severity
All severities8Critical4High1Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Canto to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-4936
9.8
1%
Jun 14
Canto <= 3.0.8 - Unauthenticated Remote File Inclusion
Affected: before 3.0.9
CVE-2024-25096
9.8
1%
Apr 3
WordPress canto plugin <= 3.0.7 - Unauth. Remote Code Execution (RCE) vulnerability
Affected: through 3.0.7
CVE-2023-3452
9.8
7%
Aug 12
The Canto plugin for WordPress is vulnerable to Remote File Inclusion in versions up to, and including, 3.0.4 via the 'wp_abspath' parameter
Affected: through 3.0.4
CVE-2022-40305
9.8
2%
Sep 9
A Server-Side Request Forgery issue in Canto Cumulus through 11.1.3 allows attackers to enumerate the internal network, overload network resources, and possibly have unspecified…
Affected: through 11.1.3
Showing 4