CVE-2020-28977

🗓️ 30 Nov 2020 14:11:15Reported by mitreType

The Canto plugin 1.3.0 for WordPress SSRF vulnerabilit

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 8
NVD	CVE-2020-28977	30 Nov 202014:15	–	nvd
Cvelist	CVE-2020-28977	30 Nov 202013:19	–	cvelist
Prion	Server side request forgery (ssrf)	30 Nov 202014:15	–	prion
Check Point Advisories	WordPress Canto Plugin Server-Side Request Forgery (CVE-2020-28976; CVE-2020-28977; CVE-2020-28978)	27 Dec 202000:00	–	checkpoint_advisories
Exploit DB	Wordpress Plugin Canto 1.3.0 - Blind SSRF (Unauthenticated)	4 Dec 202000:00	–	exploitdb
WPVulnDB	Canto <= 1.7.0 - Unauthenticated Blind SSRF	30 Nov 202000:00	–	wpvulndb
wpexploit	Canto <= 1.7.0 - Unauthenticated Blind SSRF	30 Nov 202000:00	–	wpexploit
Packet Storm	WordPress Canto 1.3.0 Server-Side Request Forgery	4 Dec 202000:00	–	packetstorm

Nvd

Node

canto cantoMatch1.3.0wordpress

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/160358/WordPress-Canto-1.3.0-Server-Side-Request-Forgery.html
wordpress	www.wordpress.org/plugins/canto/
github	www.github.com/CantoDAM/Canto-Wordpress-Plugin
gist	www.gist.github.com/p4nk4jv/87aebd999ce4b28063943480e95fd9e0
canto	www.canto.com/integrations/wordpress/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

30 Nov 2020 14:15Current

5.3Medium risk

Vulners AI Score5.3

CVSS25

CVSS35.3

EPSS0.0916

CWE-918