Skip to content
Noroxi

Canto

canto · plugin

Known security vulnerabilities for Canto. Find out in seconds which version runs on your site with WP Lens.

9 known vulnerabilities

3 critical · 6 with public exploit code · latest Apr 17, 2026

Vulnerabilities

  • CVE-2024-4936

    Canto <= 3.0.8 - Unauthenticated Remote File Inclusion

    Critical 9.8

  • CVE-2024-25096

    WordPress canto plugin <= 3.0.7 - Unauth. Remote Code Execution (RCE) vulnerability

    Critical 9.8

  • CVE-2023-3452

    Canto <= 3.0.4 - Unauthenticated Remote File Inclusion

    Critical 9.8

  • CVE-2020-24063

    The Canto plugin 1.3.0 for WordPress allows includes/lib/download.php?subdomain= SSRF.

    High 7.2

  • CVE-2026-3335

    Canto <= 3.1.1 - Missing Authorization to Unauthenticated File Upload

    Medium 5.3

  • CVE-2020-28978

    The Canto plugin 1.3.0 for WordPress contains blind SSRF vulnerability.

    Medium 5.3

  • CVE-2020-28977

    The Canto plugin 1.3.0 for WordPress contains blind SSRF vulnerability.

    Medium 5.3

  • CVE-2020-28976

    The Canto plugin 1.3.0 for WordPress contains a blind SSRF vulnerability.

    Medium 5.3

  • CVE-2026-6441

    Canto <= 3.1.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Setting Modification

    Medium 4.3

← Back to directory