Flightbycanto vulnerabilities
We track 2 vulnerabilities in Flightbycanto products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on June 14, 2024.
2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score
Latest Flightbycanto vulnerabilities
- 9.8 Critical severity
Canto: Improper Control of Filename for Include/Require Statement in PHP Program
The Canto plugin for WordPress is vulnerable to Remote File Inclusion in all versions up to, and including, 3.0.8 via the abspath parameter. This makes it possible for unauthenticated attackers to include remote files on the server, resulting in code execution
- 9.8 Critical severity
Canto: Improper Control of Filename for Include/Require Statement in PHP Program
The Canto plugin for WordPress is vulnerable to Remote File Inclusion in versions up to, and including, 3.0.4 via the 'wp_abspath' parameter. This allows unauthenticated attackers to include and execute arbitrary remote code on the server, provided that allow_