CVE-2024-4936criticalCWE-98

CVE-2024-4936: critical vulnerability in flightbycanto Canto

Canto <= 3.0.8 - Unauthenticated Remote File Inclusion

Published · Updated

Follow this CVE+ Monitor Canto

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.8epss 1.0%
The Canto plugin for WordPress is vulnerable to Remote File Inclusion in all versions up to, and including, 3.0.8 via the abspath parameter. This makes it possible for unauthenticated attackers to include remote files on the server, resulting in code execution. This required allow_url_include to be enabled on the target site in order to exploit.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
flightbycanto · Canto
Related CVEs — flightbycanto Canto

In the same product, most dangerous first.

CVE-2023-3452CRITICALCanto <= 3.0.4 - Unauthenticated Remote File InclusionEPSS 7.0%CVE-2026-3335MEDIUMCanto <= 3.1.1 - Missing Authorization to Unauthenticated File UploadEPSS 1.2%CVE-2026-6441MEDIUMCanto <= 3.1.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Setting ModificationEPSS 0.3%