Plugin icon

Canto

canto

Vulnerabilities:

6

Last Updated:

September 16, 2026

Active Installs:

100

Published
Title
Fixed in
CVSS
Published
2026-04-16
Title
Canto < 3.1.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Setting Modification
Fixed in
Fixed in 3.1.2
CVSS
4.3 (medium)
Published
2026-03-20
Title
Canto < 3.1.2 - Missing Authorization to Unauthenticated File Upload
Fixed in
Fixed in 3.1.2
CVSS
5.3 (medium)
Published
2024-06-13
Title
Canto < 3.0.9 - Unauthenticated Remote File Inclusion
Fixed in
Fixed in 3.0.9
CVSS
9.8 (critical)
Published
2024-02-12
Title
Canto < 3.0.7 - Unauthenticated RCE
Fixed in
Fixed in 3.0.7
CVSS
9.8 (critical)
Published
2023-08-09
Title
Canto < 3.0.5 - Unauthenticated Remote File Inclusion
Fixed in
Fixed in 3.0.5
CVSS
9.8 (critical)
Published
2020-11-30
Title
Canto < 3.0.9 - Unauthenticated Blind SSRF
Fixed in
Fixed in 3.0.9
CVSS
5.3 (medium)