canva ortto vulnerabilities

3 published CVEs name canva ortto among the affected products.

Critical 0High 1Medium 2Low 0Not scored 0

Newest CVEs

CVE-2026-113409
The Ortto plugin for WordPress before 1.0.25 did not escape stored settings on its admin settings page, leading to stored cross-site scripting. A threat actor…
canva · ortto
Medium4.8
CVE-2026-114173
The Ortto plugin for WordPress before 1.0.25 did not filter the WooCommerce product data it embedded in public storefront pages. An unauthenticated threat…
canva · ortto
Medium5.3
CVE-2026-113387
The Ortto plugin for WordPress before 1.0.25 did not authenticate configuration update requests, relying only on a secret exposed in public HTML. An…
canva · ortto
High8.6