Missing Authorization in Canto Plugin for WordPress

CVE-2026-6441

What is CVE-2026-6441?

The Canto plugin for WordPress is vulnerable due to a lack of authorization checks in the updateOptions() function. This vulnerability arises from the absence of capability checks and nonce verification, allowing authenticated users with subscriber-level access or higher to exploit two specific AJAX hooks: wp_ajax_updateOptions and wp_ajax_fbc_updateOptions. Consequently, attackers could modify or delete critical plugin options related to cron scheduling, affecting the functionality of scheduled WordPress events.

References