CVE-2026-114173

Full vulnerability record from the local CVENow database.

Description

The Ortto plugin for WordPress before 1.0.25 did not filter the WooCommerce product data it embedded in public storefront pages. An unauthenticated threat actor could read product passwords and private product metadata from an affected store.

Severity

MEDIUM

CVSS score

5.3 (v3.1)

Vulnerability status

Deferred

Source identifier

61adb53e-e4b3-47f7-8a93-4717c9e77dc6

Published

2026-10-29 02:16:50.187000

Last modified

2026-10-29 15:12:05.973000

View original CVE JSON

{
  "id": "CVE-2026-114173",
  "sourceIdentifier": "61adb53e-e4b3-47f7-8a93-4717c9e77dc6",
  "published": "2026-10-29T02:16:50.187",
  "lastModified": "2026-10-29T15:12:05.973",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Ortto plugin for WordPress before 1.0.25 did not filter the WooCommerce product data it embedded in public storefront pages. An unauthenticated threat actor could read product passwords and private product metadata from an affected store."
    }
  ],
  "affected": [
    {
      "source": "61adb53e-e4b3-47f7-8a93-4717c9e77dc6",
      "affectedData": [
        {
          "vendor": "canva",
          "product": "ortto",
          "defaultStatus": "unaffected",
          "platforms": [
            "WordPress"
          ],
          "versions": [
            {
              "version": "0",
              "lessThan": "1.0.25",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "61adb53e-e4b3-47f7-8a93-4717c9e77dc6",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
          "baseScore": 5.3,
          "baseSeverity": "MEDIUM",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "LOW",
          "integrityImpact": "NONE",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 1.4
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-10-29T01:49:36.815264Z",
          "id": "CVE-2026-114173",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "61adb53e-e4b3-47f7-8a93-4717c9e77dc6",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-201"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://trust.canva.com?tcuUid=acddc58b-886d-487c-b2d4-837fde87ddc8",
      "source": "61adb53e-e4b3-47f7-8a93-4717c9e77dc6"
    }
  ]
}