CVE-2023-3452

CRITICAL 9.8CVE-2023-3452 · Published 12/08/2023 · updated 17/06/2026

In short

CVE-2023-3452 is a CRITICAL (CVSS 9.8) vulnerability affecting canto (canto).
Chance of exploitation in the next 30 days (EPSS): 7.0%, higher than 94.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
canto canto	`≤ 3.0.4`	No fix yet

Description

The Canto plugin for WordPress is vulnerable to Remote File Inclusion in versions up to, and including, 3.0.4 via the 'wp_abspath' parameter. This allows unauthenticated attackers to include and execute arbitrary remote code on the server, provided that allow_url_include is enabled. Local File Inclusion is also possible, albeit less useful because it requires that the attacker be able to upload a malicious php file via FTP or some other means into a directory readable by the web server.

References

plugins.trac.wordpress.org/browser/canto/trunk/includes/lib/tree.php · Third Party Advisory
plugins.trac.wordpress.org/changeset/2951888/canto/trunk/includes/lib/tree.php · Patch
wordfence.com/threat-intel/vulnerabilities/id/a76077c6-700a-4d21-a930-b0d6455d959c · Third Party Advisory

More vulnerabilities in canto

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

canto

≤ 3.0.4

No fix yet

Description

More vulnerabilities in canto

See all →