Skip to content
OpenAdvisories

Vendor

flightbycanto

4 known vulnerabilities.

Products

Canto 4
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2023-3452 Public exploit Scanner template

    Canto <= 3.0.4 - Unauthenticated Remote File Inclusion

    The Canto plugin for WordPress is vulnerable to Remote File Inclusion in versions up to, and including, 3.0.4 via the 'wp_abspath' parameter. This allows unauthenticated attackers to include and execute arbitrary remote code on the server, provided that allow…

    flightbycanto Canto Web / CMS