canto vulnerabilities

Products

• canto 8
• canto curses 1

Latest canto CVEs

Newest publication first

1. CVE-2024-4936 Canto <= 3.0.8 - Unauthenticated Remote File Inclusion

   Published 2024-06-14

   Critical·CVSS 9.8 EPSS 1.0%

   The Canto plugin for WordPress is vulnerable to Remote File Inclusion in all versions up to, and including, 3.0.8 via the abspath parameter. This makes it possible for unauthenticated attackers to include remote files on the server, resulting in code execution. This required allo...

2. CVE-2024-25096 WordPress canto plugin <= 3.0.7 - Unauth. Remote Code Execution (RCE) vulnerability

   Published 2024-04-03

   Critical·CVSS 9.8 EPSS 0.68%

   Improper Control of Generation of Code ('Code Injection') vulnerability in Canto Inc. Canto allows Code Injection.This issue affects Canto: from n/a through 3.0.7.

3. CVE-2023-3452 Canto <= 3.0.4 - Unauthenticated Remote File Inclusion

   Published 2023-08-12

   Critical·CVSS 9.8 EPSS 7.0%

   The Canto plugin for WordPress is vulnerable to Remote File Inclusion in versions up to, and including, 3.0.4 via the 'wp_abspath' parameter. This allows unauthenticated attackers to include and execute arbitrary remote code on the server, provided that allow_url_include is enabl...

4. CVE-2022-40305 A Server-Side Request Forgery issue in Canto Cumulus through 11.1.3 allows attackers to enumerate the internal network, overload network resources, and possibly have unspecified other impact via the s...

   Published 2022-09-09

   Critical·CVSS 9.8 EPSS 1.6%

   A Server-Side Request Forgery issue in Canto Cumulus through 11.1.3 allows attackers to enumerate the internal network, overload network resources, and possibly have unspecified other impact via the server parameter to the /cwc/login login form.

5. CVE-2020-28978 Canto <= 1.9.0 - Blind Server-Side Request Forgery via tree.php

   Published 2020-11-30

   Medium·CVSS 5.3 EPSS 15.4%

   The Canto plugin 1.3.0 for WordPress contains blind SSRF vulnerability. It allows an unauthenticated attacker can make a request to any internal and external server via /includes/lib/tree.php?subdomain=SSRF.

6. CVE-2020-28977 Canto <= 1.9.0 - Blind Server-Side Request Forgery via get.php

   Published 2020-11-30

   Medium·CVSS 5.3 EPSS 15.4%

   The Canto plugin 1.3.0 for WordPress contains blind SSRF vulnerability. It allows an unauthenticated attacker can make a request to any internal and external server via /includes/lib/get.php?subdomain=SSRF.

7. CVE-2020-28976 Canto <= 1.9.0 - Blind Server-Side Request Forgery via detail.php

   Published 2020-11-30

   Medium·CVSS 5.3 EPSS 27.8%

   The Canto plugin 1.3.0 for WordPress contains a blind SSRF vulnerability. It allows an unauthenticated attacker can make a request to any internal and external server via /includes/lib/detail.php?subdomain=SSRF.

8. CVE-2020-24063 Canto <= 1.9.0 - Blind Server-Side Request Forgery via download.php

   Published 2020-11-10

   High·CVSS 7.2 EPSS 1.5%

   The Canto plugin 1.3.0 for WordPress allows includes/lib/download.php?subdomain= SSRF.

9. CVE-2013-7416 canto_curses/guibase.py in Canto Curses before 0.9.0 allows remote feed servers to execute arbitrary commands via shell metacharacters in a URL in a feed.

   Published 2014-12-03

   High·CVSS 7.5 EPSS 2.8%

   canto_curses/guibase.py in Canto Curses before 0.9.0 allows remote feed servers to execute arbitrary commands via shell metacharacters in a URL in a feed.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.