GCVE - cpe:2.3:a:canto:canto:1.3.0:*:*:*:*:wordpress:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:canto:canto:1.3.0:*:*:*:*:wordpress:*:*

part: a version: 1.3.0 update: *

Vendor	Canto (`80ab4bca-ceb5-58d7-97a5-7a0a833c99e0`)
Product	Canto (`dc605182-3734-5455-8617-cfc3a06e5711`)
Edition	*
Language	*
Software edition	*
Target software	wordpress
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2020-28978`	vulnerable	2026-06-08 05:23:56.712178	Details available The Canto plugin 1.3.0 for WordPress contains blind SSRF vulnerability. It allows an unauthenticated attacker can make a request to any internal and external server via /includes/lib/tree.php?subdomain=SSRF. Published: 2020-11-30T13:21:27.000Z Updated: 2024-08-04T16:48:00.600Z Open on db.gcve.eu Reference links https://github.com/CantoDAM/Canto-Wordpress-Plugin https://www.canto.com/integrations/wordpress/ https://wordpress.org/plugins/canto/#developers https://gist.github.com/p4nk4jv/87aebd999ce4b28063943480e95fd9e0 http://packetstormsecurity.com/files/160358/WordPress-Canto-1.3.0-Server-Side-Request-Forgery.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-28977`	vulnerable	2026-06-08 05:23:56.711697	Details available The Canto plugin 1.3.0 for WordPress contains blind SSRF vulnerability. It allows an unauthenticated attacker can make a request to any internal and external server via /includes/lib/get.php?subdomain=SSRF. Published: 2020-11-30T13:19:08.000Z Updated: 2024-08-04T16:48:00.596Z Open on db.gcve.eu Reference links https://github.com/CantoDAM/Canto-Wordpress-Plugin https://www.canto.com/integrations/wordpress/ https://wordpress.org/plugins/canto/#developers https://gist.github.com/p4nk4jv/87aebd999ce4b28063943480e95fd9e0 http://packetstormsecurity.com/files/160358/WordPress-Canto-1.3.0-Server-Side-Request-Forgery.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-28976`	vulnerable	2026-06-08 05:23:56.711247	Details available The Canto plugin 1.3.0 for WordPress contains a blind SSRF vulnerability. It allows an unauthenticated attacker can make a request to any internal and external server via /includes/lib/detail.php?subdomain=SSRF. Published: 2020-11-30T13:14:45.000Z Updated: 2024-08-04T16:48:00.549Z Open on db.gcve.eu Reference links https://github.com/CantoDAM/Canto-Wordpress-Plugin https://www.canto.com/integrations/wordpress/ https://wordpress.org/plugins/canto/#developers https://gist.github.com/p4nk4jv/87aebd999ce4b28063943480e95fd9e0 http://packetstormsecurity.com/files/160358/WordPress-Canto-1.3.0-Server-Side-Request-Forgery.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-24063`	vulnerable	2026-06-08 05:22:32.324324	Details available The Canto plugin 1.3.0 for WordPress allows includes/lib/download.php?subdomain= SSRF. Published: 2020-11-10T20:05:08.000Z Updated: 2024-08-04T15:05:11.863Z Open on db.gcve.eu Reference links https://github.com/CantoDAM/Canto-Wordpress-Plugin https://www.canto.com/integrations/wordpress/ https://wordpress.org/plugins/canto/#developers https://gist.github.com/Hakooraevil/264cb21034f946eee62371e9111c36bb	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.