CantoDAM/Canto-Wordpress-Plugin

Releases0

Stars3

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2020-28976 ↗	Nov 30, 2020Monday, 30 November 2020, 14:15	5.3 MEDIUM	5 MEDIUM
The Canto plugin 1.3.0 for WordPress contains a blind SSRF vulnerability. It allows an unauthenticated attacker can make a request to any internal and external server via /includes/lib/detail.php?subdomain=SSRF.
CVE-2020-28977 ↗	Nov 30, 2020Monday, 30 November 2020, 14:15	5.3 MEDIUM	5 MEDIUM
The Canto plugin 1.3.0 for WordPress contains blind SSRF vulnerability. It allows an unauthenticated attacker can make a request to any internal and external server via /includes/lib/get.php?subdomain=SSRF.
CVE-2020-28978 ↗	Nov 30, 2020Monday, 30 November 2020, 14:15	5.3 MEDIUM	5 MEDIUM
The Canto plugin 1.3.0 for WordPress contains blind SSRF vulnerability. It allows an unauthenticated attacker can make a request to any internal and external server via /includes/lib/tree.php?subdomain=SSRF.
CVE-2020-24063 ↗	Nov 10, 2020Tuesday, 10 November 2020, 21:15	7.2 HIGH	5 MEDIUM
The Canto plugin 1.3.0 for WordPress allows includes/lib/download.php?subdomain= SSRF.