Ditty – Responsive News Tickers, Sliders, and Lists

Уязвимости

• CVE-2024-3954участник+≤ 3.1.38

  Ditty – Responsive News Tickers, Sliders, and Lists <= 3.1.38 - Authenticated (Contributor+) PHP Object Injection

  Высокий 8.8

• CVE-2026-9011без авторизации≤ 3.1.65

  Ditty <= 3.1.65 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via ditty_init AJAX Action

  Высокий 7.5

• CVE-2023-47764без авторизации≤ 3.1.24

  WordPress Ditty plugin <= 3.1.24 - Broken Access Control vulnerability

  Средний 6.5

• CVE-2025-60105нужен вход≤ 3.1.58

  WordPress Ditty Plugin <= 3.1.58 - Cross Site Scripting (XSS) Vulnerability

  Средний 6.5

• CVE-2024-32569нужен вход≤ 3.1.31

  WordPress Ditty plugin <= 3.1.31 - Cross Site Scripting (XSS) vulnerability

  Средний 6.5

• CVE-2026-94461участник+≤ 3.1.69

  WordPress Ditty plugin <= 3.1.69 - Cross Site Scripting (XSS) vulnerability

  Средний 6.5

• CVE-2022-0533без авторизации · нужен клик→ 3.0.15

  Ditty (formerly Ditty News Ticker) < 3.0.15 - Reflected Cross-Site Scripting (XSS)

  Средний 6.1

• CVE-2023-23874участник+≤ 3.0.32

  WordPress Ditty Plugin <= 3.0.32 is vulnerable to Cross Site Scripting (XSS)

  Средний 5.4

• CVE-2026-27355без авторизации≤ 3.1.66

  WordPress Ditty plugin <= 3.1.66 - Broken Access Control vulnerability

  Средний 5.3

• CVE-2026-81274подписчик+≤ 3.1.67

  WordPress Ditty plugin <= 3.1.67 - Broken Access Control vulnerability

  Средний 5.3

• CVE-2026-93339автор+→ 3.1.70

  Ditty < 3.1.70 Stored XSS via Layout Tag Wrapper Attribute

  Средний 5.1