# cve.now: Canva

The newest entries naming Canva as an affected vendor (up to 200), of 36 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-113409](https://cve.now/CVE-2026-113409.md): The Ortto plugin for WordPress before 1.0.25 did not escape stored settings on its admin settings page, leading to stored cross-site scripti (CVSS 4.8)
- [CVE-2026-114173](https://cve.now/CVE-2026-114173.md): The Ortto plugin for WordPress before 1.0.25 did not filter the WooCommerce product data it embedded in public storefront pages. (CVSS 5.3)
- [CVE-2026-113387](https://cve.now/CVE-2026-113387.md): The Ortto plugin for WordPress before 1.0.25 did not authenticate configuration update requests, relying only on a secret exposed in public (CVSS 8.6)
- [CVE-2026-103220](https://cve.now/CVE-2026-103220.md): The Affinity by Canva application before 3.3.1 (October 2026 release) did not perform adequate bounds checking when parsing raster image dat (CVSS 4.5)
- [CVE-2026-101130](https://cve.now/CVE-2026-101130.md): The Affinity by Canva application before 3.3.1 (October 2026 release) did not perform adequate bounds checking when parsing arrays of string (CVSS 3.6)
- [CVE-2026-101094](https://cve.now/CVE-2026-101094.md): The Affinity by Canva application before 3.3.1 (October 2026 release) did not correctly handle incomplete UTF-8 character sequences when par (CVSS 3.6)
- [CVE-2026-96396](https://cve.now/CVE-2026-96396.md): The Affinity by Canva application for macOS before 3.3.1 (October 2026 release) did not safely calculate the size of an image buffer when ge (CVSS 4.9)
- [CVE-2026-96395](https://cve.now/CVE-2026-96395.md): The Affinity by Canva app for macOS before 3.3.1 (October 2026 release) did not perform adequate bounds checking when generating QuickLook t (CVSS 3.6)
- [CVE-2026-96394](https://cve.now/CVE-2026-96394.md): The Affinity by Canva application for macOS before 3.3.1 (October 2026 release) did not validate image dimensions against the size of the pi (CVSS 2.9)
- [CVE-2026-96393](https://cve.now/CVE-2026-96393.md): The Affinity by Canva app before 3.3.1 (October 2026 release) did not perform adequate bounds checking when parsing Affinity document files, (CVSS 3.6)
- [CVE-2026-90860](https://cve.now/CVE-2026-90860.md): The Canva Mobile App for HarmonyOS before v1.15.1 did not restrict the headers returned to an external origin running in a privileged WebVie (CVSS 7.1)
- [CVE-2026-92839](https://cve.now/CVE-2026-92839.md): Canva Desktop before v1.125.0 performed double decoding in the deeplink handler. (CVSS 4.3)
- [CVE-2026-81546](https://cve.now/CVE-2026-81546.md): The Affinity by Canva application before 3.3.0 (September 2026 release) did not perform adequate bounds checking when parsing Affinity docum (CVSS 7.7)
- [CVE-2026-85094](https://cve.now/CVE-2026-85094.md): The Canva Android App before 2.376.0 did not restrict the headers returned to an external origin running in a privileged WebView. (CVSS 8.8)
- [CVE-2026-85085](https://cve.now/CVE-2026-85085.md): The Canva Android App before 2.376.0 allowed an external origin to be loaded in a privileged WebView. (CVSS 9.6)
- [CVE-2025-66342](https://cve.now/CVE-2025-66342.md): A type confusion vulnerability exists in the EMF functionality of Canva Affinity. (CVSS 7.8)
- [CVE-2025-62500](https://cve.now/CVE-2025-62500.md): An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. (CVSS 6.1)
- [CVE-2025-61979](https://cve.now/CVE-2025-61979.md): An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. (CVSS 6.1)
- [CVE-2025-64733](https://cve.now/CVE-2025-64733.md): An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. (CVSS 6.1)
- [CVE-2025-66000](https://cve.now/CVE-2025-66000.md): An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. (CVSS 6.1)
- [CVE-2025-64301](https://cve.now/CVE-2025-64301.md): An out‑of‑bounds write vulnerability exists in the EMF functionality of Canva Affinity. (CVSS 7.8)
- [CVE-2025-64776](https://cve.now/CVE-2025-64776.md): An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. (CVSS 6.1)
- [CVE-2025-64735](https://cve.now/CVE-2025-64735.md): An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. (CVSS 6.1)
- [CVE-2025-66633](https://cve.now/CVE-2025-66633.md): An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. (CVSS 6.1)
- [CVE-2025-58427](https://cve.now/CVE-2025-58427.md): An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. (CVSS 6.1)
- [CVE-2025-66617](https://cve.now/CVE-2025-66617.md): An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. (CVSS 6.1)
- [CVE-2025-47873](https://cve.now/CVE-2025-47873.md): An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. (CVSS 6.1)
- [CVE-2025-61952](https://cve.now/CVE-2025-61952.md): An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. (CVSS 6.1)
- [CVE-2025-66503](https://cve.now/CVE-2025-66503.md): An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. (CVSS 6.1)
- [CVE-2025-66042](https://cve.now/CVE-2025-66042.md): An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. (CVSS 6.1)
- [CVE-2025-65119](https://cve.now/CVE-2025-65119.md): An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. (CVSS 6.1)
- [CVE-2025-62403](https://cve.now/CVE-2025-62403.md): An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. (CVSS 6.1)
- [CVE-2026-20726](https://cve.now/CVE-2026-20726.md): An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. (CVSS 6.1)
- [CVE-2026-22882](https://cve.now/CVE-2026-22882.md): An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. (CVSS 6.1)
- [CVE-2025-12792](https://cve.now/CVE-2025-12792.md): The Mac App Store distribution of the Canva for Mac desktop app before 1.117.1 was built without Hardened Runtime. (CVSS 3.2)
- [CVE-2024-32545](https://cve.now/CVE-2024-32545.md): WordPress Canva – Design beautiful blog graphics plugin \<= 1.2.4 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/canva
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.