Plugin icon

Ditty – Responsive News Tickers, Sliders, and Lists

ditty-news-ticker

Vulnerabilities:

7

Last Updated:

May 14, 2024

Active Installs:

40000

Published
Title
Fixed in
CVSS
Published
2024-05-07
Title
Ditty – Responsive News Tickers, Sliders, and Lists < 3.1.39 - Authenticated (Contributor+) PHP Object Injection
Fixed in
Fixed in 3.1.39
CVSS
8.8 (high)
Published
2024-05-06
Title
Ditty < 3.1.36 - Author+ Stored XSS
Fixed in
Fixed in 3.1.36
CVSS
5.9 (medium)
Published
2024-04-16
Title
Ditty – Responsive News Tickers, Sliders, and Lists < 3.1.32 - Authenticated (Author+) Stored Cross-Site Scripting
Fixed in
Fixed in 3.1.32
CVSS
5.4 (medium)
Published
2023-11-13
Title
Ditty < 3.1.25 - Missing Authorization via save_ditty_permissions_check
Fixed in
Fixed in 3.1.25
CVSS
5.3 (medium)
Published
2023-08-29
Title
Ditty < 3.1.25 - Reflected XSS
Fixed in
Fixed in 3.1.25
CVSS
7.1 (high)
Published
2023-02-20
Title
Ditty < 3.0.33 - Contributor+ Stored XSS
Fixed in
Fixed in 3.0.33
CVSS
6.8 (medium)
Published
2022-02-09
Title
Ditty (formerly Ditty News Ticker) < 3.0.15 - Reflected Cross-Site Scripting (XSS)
Fixed in
Fixed in 3.0.15
CVSS
4.8 (medium)