Skip to content
OpenAdvisories

Vendor

flightbycanto

4 known vulnerabilities.

Products

Canto 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2024-4936

    Canto <= 3.0.8 - Unauthenticated Remote File Inclusion

    The Canto plugin for WordPress is vulnerable to Remote File Inclusion in all versions up to, and including, 3.0.8 via the abspath parameter. This makes it possible for unauthenticated attackers to include remote files on the server, resulting in code executio…

    flightbycanto Canto Web / CMS
  • Critical 9.8
    CVE-2023-3452 Public exploit Scanner template

    Canto <= 3.0.4 - Unauthenticated Remote File Inclusion

    The Canto plugin for WordPress is vulnerable to Remote File Inclusion in versions up to, and including, 3.0.4 via the 'wp_abspath' parameter. This allows unauthenticated attackers to include and execute arbitrary remote code on the server, provided that allow…

    flightbycanto Canto Web / CMS