Priority MEDIUM 43
The Ortto plugin for WordPress before 1.0.25 did not authenticate configuration update requests, relying only on a secret exposed in public HTML.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.00287 · Published 2026-10-29 · Fixed in 1.0.25 CWE-306
Priority MEDIUM 43
The Canva Android App before 2.376.0 allowed an external origin to be loaded in a privileged WebView.
CVSS 3.1CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.00391 · Published 2026-09-04 · Fixed in 2.376.0 CWE-940
Priority MEDIUM 40
The Canva Android App before 2.376.0 did not restrict the headers returned to an external origin running in a privileged WebView.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00427 · Published 2026-09-04 · Fixed in 2.376.0 CWE-212
Priority LOW 36
A type confusion vulnerability exists in the EMF functionality of Canva Affinity.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00289 · Published 2026-03-17 · No fix listed CWE-843
Priority LOW 36
An out‑of‑bounds write vulnerability exists in the EMF functionality of Canva Affinity.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.0028 · Published 2026-03-17 · No fix listed CWE-787
Priority LOW 35
The Affinity by Canva application before 3.3.0 (September 2026 release) did not perform adequate bounds checking when parsing Affinity document files leading to a stack-based buffer overflow.
CVSS 3.1HIGH 7.7· Local · No auth · User interaction · EPSS 0.00147 · Published 2026-09-17 · Fixed in 3.3.0 CWE-121
Priority LOW 31
The Canva Mobile App for HarmonyOS before v1.15.1 did not restrict the headers returned to an external origin running in a privileged WebView.
CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.00305 · Published 2026-09-21 · Fixed in 1.15.1 CWE-212
Priority LOW 31
An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.
CVSS 3.1HIGH 7.1· Local · No auth · User interaction · EPSS 0.00285 · Published 2026-03-17 · No fix listed CWE-125
Priority LOW 31
An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.
CVSS 3.1HIGH 7.1· Local · No auth · User interaction · EPSS 0.00285 · Published 2026-03-17 · No fix listed CWE-125
Priority LOW 31
An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.
CVSS 3.1HIGH 7.1· Local · No auth · User interaction · EPSS 0.00285 · Published 2026-03-17 · No fix listed CWE-125
Priority LOW 31
An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.
CVSS 3.1HIGH 7.1· Local · No auth · User interaction · EPSS 0.00285 · Published 2026-03-17 · No fix listed CWE-125
Priority LOW 31
An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.
CVSS 3.1HIGH 7.1· Local · No auth · User interaction · EPSS 0.00285 · Published 2026-03-17 · No fix listed CWE-125
Priority LOW 31
An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.
CVSS 3.1HIGH 7.1· Local · No auth · User interaction · EPSS 0.00285 · Published 2026-03-17 · No fix listed CWE-125
Priority LOW 31
An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.
CVSS 3.1HIGH 7.1· Local · No auth · User interaction · EPSS 0.00285 · Published 2026-03-17 · No fix listed CWE-125
Priority LOW 31
An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.
CVSS 3.1HIGH 7.1· Local · No auth · User interaction · EPSS 0.00285 · Published 2026-03-17 · No fix listed CWE-125
Priority LOW 31
An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.
CVSS 3.1HIGH 7.1· Local · No auth · User interaction · EPSS 0.00294 · Published 2026-03-17 · No fix listed CWE-125
Priority LOW 31
An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.
CVSS 3.1HIGH 7.1· Local · No auth · User interaction · EPSS 0.00285 · Published 2026-03-17 · No fix listed CWE-125
Priority LOW 31
An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.
CVSS 3.1HIGH 7.1· Local · No auth · User interaction · EPSS 0.00285 · Published 2026-03-17 · No fix listed CWE-125
Priority LOW 31
An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.
CVSS 3.1HIGH 7.1· Local · No auth · User interaction · EPSS 0.00285 · Published 2026-03-17 · No fix listed CWE-125
Priority LOW 31
An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.
CVSS 3.1HIGH 7.1· Local · No auth · User interaction · EPSS 0.00285 · Published 2026-03-17 · No fix listed CWE-125
Priority LOW 31
An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.
CVSS 3.1HIGH 7.1· Local · No auth · User interaction · EPSS 0.00285 · Published 2026-03-17 · No fix listed CWE-125
Priority LOW 31
An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.
CVSS 3.1HIGH 7.1· Local · No auth · User interaction · EPSS 0.00285 · Published 2026-03-17 · No fix listed CWE-125
Priority LOW 31
An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.
CVSS 3.1HIGH 7.1· Local · No auth · User interaction · EPSS 0.00285 · Published 2026-03-17 · No fix listed CWE-125
Priority LOW 31
An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.
CVSS 3.1HIGH 7.1· Local · No auth · User interaction · EPSS 0.00285 · Published 2026-03-17 · No fix listed CWE-125
Priority LOW 31
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Canva Canva – Design beautiful blog graphics allows Reflected XSS.This issue affects Canva – Design beautiful blog gra…
CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.00333 · Published 2024-04-17 · No fix listed CWE-79
Load more
THREATIST.IORead the docs