CVE-2020-28976

MEDIUM 5.3CVE-2020-28976 · Published 30/11/2020 · updated 17/06/2026

Package	Affected versions	Patched versions
canto canto	`= 1.3.0`	No fix yet

Description

The Canto plugin 1.3.0 for WordPress contains a blind SSRF vulnerability. It allows an unauthenticated attacker can make a request to any internal and external server via /includes/lib/detail.php?subdomain=SSRF.

References

packetstormsecurity.com/files/160358/WordPress-Canto-1.3.0-Server-Side-Request-Forgery.html · Third Party Advisory
gist.github.com/p4nk4jv/87aebd999ce4b28063943480e95fd9e0 · Third Party Advisory
CantoDAM/Canto-Wordpress-Plugin · Product
wordpress.org/plugins/canto · Release Notes
canto.com/integrations/wordpress · Product

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free