Canva

Security Notices
Canva Ortto WordPress Plugin 1.0.25 Fixes Three Flaws
10/28/2026

Ortto WordPress plugin 1.0.25 fixes configuration overwrite, private product-data disclosure, and XSS. Update, inspect settings, and retain evidence.

Read this guide
Security Notices
Canva Fixes HarmonyOS Mobile Session Exposure
09/21/2026

The Canva HarmonyOS flaw can expose session headers when an attacker controls the privileged WebView. Update affected HarmonyOS installations and review session activity; the notice does not extend this finding to other Canva platforms.

Read this guide