OR
Product
ortto
3
CVEs
0
On KEV
8.6
Max CVSS
3
New 30D
Severity mix
Critical 0High 1Medium 2Low 0
Watch
Add ortto to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-113387 New | 8.6 | Oct 29 | The Ortto plugin for WordPress before 1.0.25 did not authenticate configuration update requests, relying only on a secret exposed in public HTML Affected: before 1.0.25 |
| CVE-2026-114173 New | 5.3 | Oct 29 | The Ortto plugin for WordPress before 1.0.25 did not filter the WooCommerce product data it embedded in public storefront pages Affected: before 1.0.25 |
| CVE-2026-113409 New | 4.8 | Oct 29 | The Ortto plugin for WordPress before 1.0.25 did not escape stored settings on its admin settings page, leading to stored cross-site scripting Affected: before 1.0.25 |
Showing 3