Browse CVEs

HIGH 8.6 CVE-2025-8085EPSS 17% The Ditty WordPress plugin before 3.1.58 lacks authorization and authentication for requests to its displayItems endpoint, allowing unauthenticated … Ditty 3.1.58+ Fix from $1,9502025-09-08 MEDIUM 6.1 CVE-2024-6715 The Ditty WordPress plugin before 3.1.46 re-introduced a previously fixed security issue (https://wpscan.com/vulnerability/80a9eb3a-2cb1-4844-9004-b… Ditty 3.1.46+ Fix from $1,6002024-08-23 MEDIUM 5.4 CVE-2024-6710 The Ditty WordPress plugin before 3.1.45 does not sanitise and escape some parameters, which could allow users with a role as low as Contributor to … Ditty 3.1.46+ Fix from $1,6002024-08-05 MEDIUM 5.4 CVE-2024-3939 The Ditty WordPress plugin before 3.1.36 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to … Ditty 3.1.36+ Fix from $1,6002024-05-27 MEDIUM 6.1 CVE-2023-4148 The Ditty WordPress plugin before 3.1.25 does not sanitise and escape some parameters and generated URLs before outputting them back in attributes, l… Ditty 3.1.25+ Fix from $1,6002023-09-25 MEDIUM 5.4 CVE-2023-23874 Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Metaphor Creations Ditty plugin <= 3.0.32 versions. Ditty 3.0.33+ Fix from $1,6002023-05-03 MEDIUM 6.1 CVE-2016-15027 A vulnerability was found in meta4creations Post Duplicator Plugin 2.18 on WordPress. It has been classified as problematic. Affected is the function… Post Duplicator Patch available Fix from $1,6002023-02-20 MEDIUM 5.4 CVE-2021-33852 A cross-site scripting (XSS) attack can cause arbitrary code (JavaScript) to run in a user's browser and can use an application as the vehicle for th… Post Duplicator No fix yet Fix from $1,6002022-03-10 MEDIUM 6.1 CVE-2022-0533 The Ditty (formerly Ditty News Ticker) WordPress plugin before 3.0.15 is affected by a Reflected Cross-Site Scripting (XSS) vulnerability. Ditty 3.0.15+ Fix from $1,6002022-03-07