Pankaj Verma (_p4nk4j) - Security Researcher - Exploit Intelligence Platform

CVE-2020-28978 EXPLOITDB MEDIUM WRITEUP

WordPress Canto Plugin 1.3.0 - Blind SSRF via subdomain Parameter

The Canto plugin 1.3.0 for WordPress contains blind SSRF vulnerability. It allows an unauthenticated attacker can make a request to any internal and external server via /includes/lib/tree.php?subdomain=SSRF.

CVSS 5.3

View Code

CVE-2020-28977 EXPLOITDB MEDIUM WRITEUP

WordPress Canto Plugin 1.3.0 - Blind Server-Side Request Forgery via get.php

The Canto plugin 1.3.0 for WordPress contains blind SSRF vulnerability. It allows an unauthenticated attacker can make a request to any internal and external server via /includes/lib/get.php?subdomain=SSRF.

CVSS 5.3

View Code

CVE-2020-28976 EXPLOITDB MEDIUM text WRITEUP

WordPress Canto Plugin 1.3.0 - Blind Server-Side Request Forgery via detail.php

The Canto plugin 1.3.0 for WordPress contains a blind SSRF vulnerability. It allows an unauthenticated attacker can make a request to any internal and external server via /includes/lib/detail.php?subdomain=SSRF.

CVSS 5.3

View Code