CVEs we hold for Canva

Records whose assigning authority named Canva as the affected vendor. Newest identifiers first, capped at 200.

CVE-2026-92839no title heldCanva

CVE-2026-85094no title heldCanva

CVE-2026-85085no title heldCanva

CVE-2026-81546no title heldCanva Affinity

CVE-2026-22882no title heldCanva Affinity

CVE-2026-20726no title heldCanva Affinity

CVE-2025-66633no title heldCanva Affinity

CVE-2025-66617no title heldCanva Affinity

CVE-2025-66503no title heldCanva Affinity

CVE-2025-66342no title heldCanva Affinity

CVE-2025-66042no title heldCanva Affinity

CVE-2025-66000no title heldCanva Affinity

CVE-2025-65119no title heldCanva Affinity

CVE-2025-64776no title heldCanva Affinity

CVE-2025-64735no title heldCanva Affinity

CVE-2025-64733no title heldCanva Affinity

CVE-2025-64301no title heldCanva Affinity

CVE-2025-62500no title heldCanva Affinity

CVE-2025-62403no title heldCanva Affinity

CVE-2025-61979no title heldCanva Affinity

CVE-2025-61952no title heldCanva Affinity

CVE-2025-58427no title heldCanva Affinity

CVE-2025-47873no title heldCanva Affinity

CVE-2025-12792no title heldCanva

CVE-2024-32545WordPress Canva – Design beautiful blog graphics plugin <= 1.2.4 - Cross Site Scripting (XSS) vulnerabilityCanva – Design beautiful blog graphics

CVE-2024-12275CanvasFlow <= 1.5.5 - Reflected XSSUnknown Canvasflow for WordPress

26 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.