Lucene search
WpvulndbWPVDB-ID:586524D3-F63F-4A4E-BA2C-9CA54379DF9CHistoryNov 24, 2023 - 12:00 a.m.
Ditty < 3.1.25 - Missing Authorization via save_ditty_permissions_check
2023-11-2400:00:00
wpscan.com
8
wordpress
ditty plugin
authorization
vulnerability
unauthenticated attackers
AI Score
9.4
Confidence
High
Description The Ditty plugin for WordPress is vulnerable to unauthorized editing of dittys due to a missing capability check on the save_ditty_permissions_check function in versions up to, and including, 3.1.24. This makes it possible for unauthenticated attackers to edit dittys.
Related
wordfence
wordfence