cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,poc,trended,trended_no_1,published,trended_score
CVE-2024-4936,https://securityvulnerability.io/vulnerability/CVE-2024-4936,Canto plugin vulnerable to Remote File Inclusion exploit,"The Canto plugin for WordPress contains a Remote File Inclusion vulnerability that affects all versions up to and including 3.0.8. This vulnerability arises from inadequate validation of the abspath parameter, enabling unauthenticated attackers to include and execute remote files on the server. The exploit requires that the allow_url_include setting be enabled on the target WordPress site, which could lead to severe security implications, including unauthorized command execution and server compromise.",Wordpress,Canto,9.8,CRITICAL,0.0004299999854993075,false,,false,false,false,,false,false,2024-06-14T04:36:55.457Z,0
CVE-2023-3452,https://securityvulnerability.io/vulnerability/CVE-2023-3452,Remote File Inclusion Vulnerability in Canto Plugin for WordPress,"The Canto plugin for WordPress contains a Remote File Inclusion vulnerability that affects versions up to 3.0.4. This vulnerability arises from improper handling of the 'wp_abspath' parameter, which potentially allows unauthenticated attackers to execute arbitrary remote code when the server's allow_url_include directive is enabled. While local file inclusion could also be exploited, it presents a lower risk as it requires the attacker to upload a malicious PHP file via FTP or another method, placing it in a directory accessible by the web server.",Wordpress,Canto,9.8,CRITICAL,0.0026100000832229853,false,,false,false,true,true,false,false,2023-08-12T03:15:00.000Z,0
CVE-2020-28978,https://securityvulnerability.io/vulnerability/CVE-2020-28978,,The Canto plugin 1.3.0 for WordPress contains blind SSRF vulnerability. It allows an unauthenticated attacker can make a request to any internal and external server via /includes/lib/tree.php?subdomain=SSRF.,Wordpress,Canto,5.3,MEDIUM,0.014159999787807465,false,,false,false,false,,false,false,2020-11-30T13:21:27.000Z,0
CVE-2020-28977,https://securityvulnerability.io/vulnerability/CVE-2020-28977,,The Canto plugin 1.3.0 for WordPress contains blind SSRF vulnerability. It allows an unauthenticated attacker can make a request to any internal and external server via /includes/lib/get.php?subdomain=SSRF.,Wordpress,Canto,5.3,MEDIUM,0.014159999787807465,false,,false,false,false,,false,false,2020-11-30T13:19:08.000Z,0
CVE-2020-28976,https://securityvulnerability.io/vulnerability/CVE-2020-28976,,The Canto plugin 1.3.0 for WordPress contains a blind SSRF vulnerability. It allows an unauthenticated attacker can make a request to any internal and external server via /includes/lib/detail.php?subdomain=SSRF.,Wordpress,Canto,5.3,MEDIUM,0.052949998527765274,false,,false,false,false,,false,false,2020-11-30T13:14:45.000Z,0
CVE-2020-24063,https://securityvulnerability.io/vulnerability/CVE-2020-24063,,The Canto plugin 1.3.0 for WordPress allows includes/lib/download.php?subdomain= SSRF.,Wordpress,Canto,7.2,HIGH,0.0019000000320374966,false,,false,false,false,,false,false,2020-11-10T20:05:08.000Z,0