Exposure of Canto

Digital asset management

18

exposure score

301

sites use

0

exploited

3

critical

CVEs

5 results

CVE-2023-3452CRITICALCanto <= 3.0.4 - Unauthenticated Remote File InclusionEPSS 7.0%CVE-2026-3335MEDIUMCanto <= 3.1.1 - Missing Authorization to Unauthenticated File UploadEPSS 1.1%CVE-2024-4936CRITICALCanto <= 3.0.8 - Unauthenticated Remote File InclusionEPSS 1.0%CVE-2024-25096CRITICALWordPress canto plugin <= 3.0.7 - Unauth. Remote Code Execution (RCE) vulnerabilityEPSS 0.7%CVE-2026-6441MEDIUMCanto <= 3.1.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Setting ModificationEPSS 0.3%