5.3Media

CVE-2026-114173

canva ortto Publicada: 2026-10-29 04:42 (hace 14 días)

Descripción

The Ortto plugin for WordPress before 1.0.25 did not filter the WooCommerce product data it embedded in public storefront pages. An unauthenticated threat actor could read product passwords and private product metadata from an affected store.

Debilidad (CWE): CWE-201

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

Fabricante	Producto	Versiones
canva	ortto	< 1.0.25

Referencias y parches

https://trust.canva.com?tcuUid=acddc58b-886d-487c-b2d4-837fde87ddc8

Puntuación CVSS

5.3Media

Fuente: Canva · CVSS 3.1

Vector de ataque: Red
Complejidad: Baja
Privilegios: Ninguno
Interacción del usuario: Ninguna
Alcance: Sin cambio
Confidencialidad: Bajo
Integridad: Ninguno
Disponibilidad: Ninguno

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Todas las puntuaciones (2)

cna	CVSS 3.1	5.3Media
61adb53e-e4b3-47f7-8a93-4717c9e77dc6	CVSS 3.1	5.3Media

EPSS (probabilidad de explotación en 30 días)

0.29%

superior al 21 % de todas las CVE

Evaluación de CISA (SSVC)

Explotación: none
Automatizable: yes
Impacto técnico: partial

Cronología

ID reservado2026-10-20
Publicada2026-10-29 04:42
Llegó a IP-DB2026-10-29 05:03
Última actualización2026-10-29 18:12

Asignada por (CNA): Canva
Estado en NVD: Deferred

Ver en la fuente: CVE.org · NVD

Reciba un aviso cuando estos productos tengan una vulnerabilidad nueva

Activar alertas por correo

Gratis · con cuenta · se desactiva cuando quiera

CVE recientes del mismo producto — WordPress plugins & themes

Sin puntuación

CVE-2026-124817 hace 2 horas

Clockinator Lite < 1.1.0 - Unauthenticated Leave Record Modification

Clockinator Lite

The Clockinator Lite WordPress plugin before 1.1.0 does not check authorisation or ownership when updating leave requests, allowing unauthenticated users to modify any leave record, including approving or rejecting requests and reassigning them to other users.

Sin puntuación

CVE-2026-76792 hace 2 horas

User Verification 2.0.38 - 2.0.48 - Unauthenticated Account Takeover via Unthrottled OTP Login Verification

User Verification by PickPlugins

The User Verification by PickPlugins WordPress plugin before 2.0.49 does not rate limit the verification step of its one-time-password login, and does not expire the generated code, allowing unauthenticated attackers to brute force it and log in as any user, …

Sin puntuación

CVE-2026-124815 hace 2 horas

Clockinator Lite < 1.1.0 - Unauthenticated SQLi via Record Deletion Actions

Clockinator Lite

The Clockinator Lite WordPress plugin before 1.1.0 does not restrict access to several of its record deletion actions, and uses a user-supplied table name in a SQL query without validating or escaping it, allowing unauthenticated users to perform SQL injectio…

Sin puntuación

CVE-2026-124814 hace 2 horas

Ultimate Addons for Elementor Forms < 1.0.8 - Unauthenticated Arbitrary File Upload via 'type' Parameter

Ultimate Addons for Elementor Forms

The Ultimate Addons for Elementor Forms WordPress plugin before 1.0.8 does not properly validate the extension of uploaded files in its bundled file upload field, allowing unauthenticated users to upload arbitrary files such as PHP scripts and achieve remote …

Sin puntuación

CVE-2026-124665 hace 2 horas

Order Tracking < 3.6.2 - Unauthenticated Customer and Sales Rep Order History Disclosure via IDOR

Order Tracking

The Order Tracking WordPress plugin before 3.6.2 does not verify that a visitor owns the customer or sales representative account whose orders they request, and the account numbers default to sequential values, allowing unauthenticated users to retrieve the …

Sin puntuación

CVE-2026-124653 hace 2 horas

Mine CloudVod < 2.6.6 - Unauthenticated Cloud Storage Credential Disclosure

Mine CloudVod

The Mine CloudVod WordPress plugin before 2.6.6 does not restrict who can request cloud storage upload credentials from several of its REST API routes, allowing unauthenticated attackers to obtain signed upload policies and temporary credentials for the site'…