Advisories · Technology
Canto.
Every CVE that names Canto among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.3 Medium
Canto <= 3.1.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Setting Modification
- Canto
- Broken access control
- CVSS 5.3 Medium
Canto <= 3.1.1 - Missing Authorization to Unauthenticated File Upload
- Canto
- Broken access control
- CVSS 9.8 CriticalCritical · CVSS 9+
Canto <= 3.0.8 - Unauthenticated Remote File Inclusion
- Canto
- File inclusion
- CVSS 10.0 CriticalCritical · CVSS 9+
WordPress canto plugin <= 3.0.7 - Unauth. Remote Code Execution (RCE) vulnerability
- Canto
- Code injection
- CVSS 9.8 CriticalCritical · CVSS 9+
Canto <= 3.0.4 - Unauthenticated Remote File Inclusion
- Canto
- File inclusion