OR
Product
ortto
by canva · last CVE Oct 29, 2026
3
CVEs
0
On KEV
8.6
Max CVSS
3
New 30D
Severity mix
Critical 0High 1Medium 2Low 0
Watch

Add ortto to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-113387
New
8.6–Oct 29
The Ortto plugin for WordPress before 1.0.25 did not authenticate configuration update requests, relying only on a secret exposed in public HTML
Affected: before 1.0.25
Showing 1