Lucene search

Ditty Security Vulnerabilities

cve

CVE-2022-0533

The Ditty (formerly Ditty News Ticker) WordPress plugin before 3.0.15 is affected by a Reflected Cross-Site Scripting (XSS) vulnerability.

6.1CVSS

6AI Score

0.001EPSS

2022-03-07 09:15 AM

cve

CVE-2023-23874

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Metaphor Creations Ditty plugin <= 3.0.32 versions.

6.5CVSS

5.2AI Score

0.0005EPSS

2023-05-03 02:15 PM

cve

CVE-2023-4148

The Ditty WordPress plugin before 3.1.25 does not sanitise and escape some parameters and generated URLs before outputting them back in attributes, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin.

6.1CVSS

6AI Score

0.001EPSS

2023-09-25 04:15 PM