Canva vulnerabilities

Products

• Affinity 27
• Canva 5
• Ortto 3

Newest

• canva ortto The Ortto plugin for WordPress before 1.0.25 did not escape stored settings on its admin settings... CVE-2026-113409 4.8 MediumOctober 29, 2026
• canva ortto The Ortto plugin for WordPress before 1.0.25 did not filter the WooCommerce product data it... CVE-2026-114173 5.3 MediumOctober 29, 2026
• canva ortto The Ortto plugin for WordPress before 1.0.25 did not authenticate configuration update requests,... CVE-2026-113387 8.6 HighOctober 29, 2026
• canva affinity The Affinity by Canva application before 3.3.1 (October 2026 release) did not perform adequate... CVE-2026-103220 4.5 MediumOctober 9, 2026
• canva affinity The Affinity by Canva application before 3.3.1 (October 2026 release) did not perform adequate... CVE-2026-101130 3.6 LowOctober 9, 2026
• canva affinity The Affinity by Canva application before 3.3.1 (October 2026 release) did not correctly handle... CVE-2026-101094 3.6 LowOctober 9, 2026
• canva affinity The Affinity by Canva application for macOS before 3.3.1 (October 2026 release) did not safely... CVE-2026-96396 4.9 MediumOctober 9, 2026
• canva affinity The Affinity by Canva app for macOS before 3.3.1 (October 2026 release) did not perform adequate... CVE-2026-96395 3.6 LowOctober 9, 2026
• canva affinity The Affinity by Canva application for macOS before 3.3.1 (October 2026 release) did not validate... CVE-2026-96394 2.9 LowOctober 9, 2026
• canva affinity The Affinity by Canva app before 3.3.1 (October 2026 release) did not perform adequate bounds... CVE-2026-96393 3.6 LowOctober 9, 2026
• canva The Canva Mobile App for HarmonyOS before v1.15.1 did not restrict the headers returned to an... CVE-2026-90860 7.1 HighSeptember 21, 2026
• canva Canva Desktop before v1.125.0 performed double decoding in the deeplink handler. A threat actor... CVE-2026-92839 4.3 MediumSeptember 17, 2026
• canva affinity The Affinity by Canva application before 3.3.0 (September 2026 release) did not perform adequate... CVE-2026-81546 7.7 HighSeptember 17, 2026
• canva The Canva Android App before 2.376.0 did not restrict the headers returned to an external origin... CVE-2026-85094 8.8 HighSeptember 4, 2026
• canva The Canva Android App before 2.376.0 allowed an external origin to be loaded in a privileged... CVE-2026-85085 9.6 CriticalSeptember 4, 2026
• canva affinity A type confusion vulnerability exists in the EMF functionality of Canva Affinity. A specially... CVE-2025-66342 7.8 HighMarch 17, 2026
• canva affinity An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a... CVE-2025-62500 6.1 MediumMarch 17, 2026
• canva affinity An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a... CVE-2025-61979 6.1 MediumMarch 17, 2026
• canva affinity An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a... CVE-2025-64733 6.1 MediumMarch 17, 2026
• canva affinity An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a... CVE-2025-66000 6.1 MediumMarch 17, 2026
• canva affinity An out‑of‑bounds write vulnerability exists in the EMF functionality of Canva Affinity. By using... CVE-2025-64301 7.8 HighMarch 17, 2026
• canva affinity An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a... CVE-2025-64776 6.1 MediumMarch 17, 2026
• canva affinity An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a... CVE-2025-64735 6.1 MediumMarch 17, 2026
• canva affinity An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a... CVE-2025-66633 6.1 MediumMarch 17, 2026
• canva affinity An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a... CVE-2025-58427 6.1 MediumMarch 17, 2026
• canva affinity An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a... CVE-2025-66617 6.1 MediumMarch 17, 2026
• canva affinity An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a... CVE-2025-47873 6.1 MediumMarch 17, 2026
• canva affinity An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a... CVE-2025-61952 6.1 MediumMarch 17, 2026
• canva affinity An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a... CVE-2025-66503 6.1 MediumMarch 17, 2026
• canva affinity An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a... CVE-2025-66042 6.1 MediumMarch 17, 2026
• canva affinity An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a... CVE-2025-65119 6.1 MediumMarch 17, 2026
• canva affinity An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a... CVE-2025-62403 6.1 MediumMarch 17, 2026
• canva affinity An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a... CVE-2026-20726 6.1 MediumMarch 17, 2026
• canva affinity An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a... CVE-2026-22882 6.1 MediumMarch 17, 2026
• canva The Mac App Store distribution of the Canva for Mac desktop app before 1.117.1 was built without... CVE-2025-12792 3.2 LowNovember 18, 2025
• canva – design beautiful blog graphics WordPress Canva – Design beautiful blog graphics plugin <= 1.2.4 - Cross Site Scripting (XSS) vulnerability CVE-2024-32545 7.1 HighApril 17, 2024