Lucene search
+L

152 matches found

Positive Technologies
Positive Technologies
added 2026/03/21 12:0 a.m.9 views

PT-2026-26851

The Canto plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.1.1 via the /wp-content/plugins/canto/includes/lib/copy-media.php file. This is due to the file being directly accessible without any authentication, authorization, or nonce checks, and t...

5.3CVSS5.9AI score0.00437EPSS
SaveExploits0References8
Packet Storm
Packet Storm
added 2026/03/13 12:0 a.m.153 views

📄 WordPress Canto 3.0.4 Remote File Inclusion

This is a Metasploit module that exploits a remote file inclusion vulnerability in WordPress Canto plugin versions 3.0.4 and below. ============================================================================================================================================= | Title : WordPress Can...

9.8CVSS5.8AI score0.0562EPSS
SaveExploits7
GithubExploit
GithubExploit
added 2026/03/06 2:20 a.m.242 views

Exploit for CVE-2023-3452

Metersploit exploit module canto RCE CVE-2024-25096 & CVE-2023...

10CVSS6.2AI score0.0562EPSS
SaveExploits8
GithubExploit
GithubExploit
added 2026/03/03 10:5 a.m.204 views

Exploit for CVE-2023-3452

CVE-2023-3452 - WordPress Canto Plugin RCE Exploit for the Wo...

9.8CVSS6AI score0.0562EPSS
SaveExploits7
GithubExploit
GithubExploit
added 2026/03/01 3:1 a.m.217 views

Exploit for Code Injection in Canto

Metersploit exploit module canto RCE CVE-2024-25096 This is a...

10CVSS6AI score0.00687EPSS
SaveExploits2
RedhatCVE
RedhatCVE
added 2026/01/25 9:16 a.m.17 views

CVE-2026-1095

The Canto Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'fx' shortcode attribute in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS5.8AI score0.0025EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/24 8:16 a.m.7 views

CVE-2026-1095

The Canto Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'fx' shortcode attribute in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS0.0025EPSS
SaveExploits0References3
CVE
CVE
added 2026/01/24 7:26 a.m.23 views

CVE-2026-1095

CVE-2026-1095 covers a stored cross-site scripting flaw in the WordPress plugin Canto Testimonials . According to the vulnerability entry, all versions up to and including 1.0 are affected by insufficient input sanitization and output escaping on the fx shortcode attribute, enabling an authentica...

6.4CVSS5.8AI score0.0025EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/01/24 7:26 a.m.3 views

CVE-2026-1095

The Canto Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'fx' shortcode attribute in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS6AI score0.0025EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/01/24 7:26 a.m.4 views

CVE-2026-1095 Canto Testimonials <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'fx' Shortcode Attribute

The Canto Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'fx' shortcode attribute in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS6AI score0.0025EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2026/01/24 5:43 a.m.8 views

WordPress Canto Testimonials plugin <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'fx' Shortcode Attribute vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'fx' Shortcode Attribute vulnerability discovered by theviper17y in WordPress Plugin Canto Testimonials versions = 1.0...

6.4CVSS5.4AI score0.0025EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2026/01/24 12:0 a.m.6 views

WordPress plugin Canto: Testimonials for cross-site scripting vulnerabilities

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

6.4CVSS5.7AI score0.0025EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/01/24 12:0 a.m.12 views

PT-2026-4584

The Canto Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'fx' shortcode attribute in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS5.8AI score0.0025EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2013-7180

Malware in sbrugna...

7.5CVSS6.4AI score0.02846EPSS
SaveExploits1References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2020-21361

Malware in sbrugna...

5.3CVSS5.3AI score0.15254EPSS
SaveExploits3References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2020-16799

Malware in sbrugna...

7.2CVSS7AI score0.01446EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2020-21360

Malware in sbrugna...

5.3CVSS5.3AI score0.15254EPSS
SaveExploits3References7
EUVD
EUVD
added 2025/10/03 8:7 p.m.15 views

EUVD-2024-22458

Malicious code in bioql PyPI...

10CVSS8.6AI score0.00687EPSS
SaveExploits2References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.9 views

EUVD-2022-43602

Malicious code in bioql PyPI...

9.8CVSS9.2AI score0.01233EPSS
SaveExploits1References1
OSV
OSV
added 2025/08/14 6:52 p.m.4 views

MAL-2025-9072 Malicious code in @malware-test-whops-canto/test-mlw3-whops-canto (npm)

The package @malware-test-whops-canto/test-mlw3-whops-canto was found to contain malicious code...

7.2AI score
SaveExploits0
Rows per page
Query Builder