flightbycanto

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

flightbycanto records in CISA KEV

No flightbycanto vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-02878 CVE-2026-3335 · GHSA-j9m2-xx67-38fc

Canto <= 3.1.1 - Missing Authorization to Unauthenticated File Upload

LOW 32

The Canto plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.1.1 via the `/wp-content/plugins/canto/includes/lib/copy-media.php` file.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01167 Published 2026-03-21 No fix listed CWE-862

TI-2026-05649 CVE-2026-6441 · GHSA-8pj7-rr49-2c47

Canto <= 3.1.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Setting Modification

LOW 20

The Canto plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 3.1.1.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00282 Published 2026-04-17 No fix listed CWE-862

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0