Read the docs

Canto Inc.

Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Canto Inc. records in CISA KEV

No Canto Inc. vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Canto 8 records MEDIUM Canto Curses 1 record LOW

Records

8 records in Canto · all components

TI-2023-03224 CVE-2023-3452 · GHSA-r7j9-2qv5-fpm9

Canto <= 3.0.4 - Unauthenticated Remote File Inclusion

Priority MEDIUM 59

The Canto plugin for WordPress is vulnerable to Remote File Inclusion in versions up to, and including, 3.0.4 via the 'wp_abspath' parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.06958 Published 2023-08-12 No fix listed CWE-98
TI-2024-04591 CVE-2024-4936 · GHSA-w55j-394j-qgr9

Canto <= 3.0.8 - Unauthenticated Remote File Inclusion

Priority MEDIUM 51

The Canto plugin for WordPress is vulnerable to Remote File Inclusion in all versions up to, and including, 3.0.8 via the abspath parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01027 Published 2024-06-14 No fix listed CWE-98
TI-2022-19142 CVE-2022-40305 · GHSA-c7qc-fwv2-h5hv

A Server-Side Request Forgery issue in Canto Cumulus through 11.1.3 allows attackers to…

Priority MEDIUM 45

A Server-Side Request Forgery issue in Canto Cumulus through 11.1.3 allows attackers to enumerate the internal network, overload network resources, and possibly have unspecified other impact via the server parameter to t…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01575 Published 2022-09-09 No fix listed CWE-918
Open these records in search →