Known CVE

Ditty < 3.1.25 - Cross-Site Scripting

The Ditty WordPress plugin before 3.1.25 does not sanitise and escape some parameters and generated URLs before outputting them back in attributes, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin.

CVE-2023-4148

Medium2023CVSS 6.1CWE-79

cve2023 · ditty-news-ticker · wordpress · wp-plugin · wpscan · wp · authenticated · metaphorcreations

Verified scans run this check after you prove you own the site.

All known CVEs View the checks catalog National Vulnerability Database

Scan a website