Ditty – Responsive News Tickers, Sliders, and Lists

Güvenlik açıkları

• CVE-2024-3954katılımcı+≤ 3.1.38

  Ditty – Responsive News Tickers, Sliders, and Lists <= 3.1.38 - Authenticated (Contributor+) PHP Object Injection

  Yüksek 8.8

• CVE-2026-9011kimlik doğrulamasız≤ 3.1.65

  Ditty <= 3.1.65 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via ditty_init AJAX Action

  Yüksek 7.5

• CVE-2023-47764kimlik doğrulamasız≤ 3.1.24

  WordPress Ditty plugin <= 3.1.24 - Broken Access Control vulnerability

  Orta 6.5

• CVE-2025-60105giriş gerekir≤ 3.1.58

  WordPress Ditty Plugin <= 3.1.58 - Cross Site Scripting (XSS) Vulnerability

  Orta 6.5

• CVE-2024-32569giriş gerekir≤ 3.1.31

  WordPress Ditty plugin <= 3.1.31 - Cross Site Scripting (XSS) vulnerability

  Orta 6.5

• CVE-2026-94461katılımcı+≤ 3.1.69

  WordPress Ditty plugin <= 3.1.69 - Cross Site Scripting (XSS) vulnerability

  Orta 6.5

• CVE-2022-0533kimlik doğrulamasız · tıklama gerekir→ 3.0.15

  Ditty (formerly Ditty News Ticker) < 3.0.15 - Reflected Cross-Site Scripting (XSS)

  Orta 6.1

• CVE-2023-23874katılımcı+≤ 3.0.32

  WordPress Ditty Plugin <= 3.0.32 is vulnerable to Cross Site Scripting (XSS)

  Orta 5.4

• CVE-2026-27355kimlik doğrulamasız≤ 3.1.66

  WordPress Ditty plugin <= 3.1.66 - Broken Access Control vulnerability

  Orta 5.3

• CVE-2026-81274abone+≤ 3.1.67

  WordPress Ditty plugin <= 3.1.67 - Broken Access Control vulnerability

  Orta 5.3

• CVE-2026-93339yazar+→ 3.1.70

  Ditty < 3.1.70 Stored XSS via Layout Tag Wrapper Attribute

  Orta 5.1