Plugin icon

Ditty – Responsive News Tickers, Sliders, and Lists

ditty-news-ticker

Vulnerabilities:

14

Last Updated:

March 12, 2026

Active Installs:

30000

Published
Title
Fixed in
CVSS
Published
2025-09-26
Title
Ditty < 3.1.59 - Contributor+ Stored XSS
Fixed in
Fixed in 3.1.59
CVSS
5.9 (medium)
Published
2025-08-18
Title
Ditty < 3.1.58 - Unauthenticated SSRF
Fixed in
Fixed in 3.1.58
CVSS
8.6 (high)
Published
2024-11-14
Title
Ditty – Responsive News Tickers, Sliders, and Lists < 3.1.52 - Author+ Stored XSS
Fixed in
Fixed in 3.1.52
CVSS
3.5 (low)
Published
2024-10-31
Title
Ditty < 3.1.47 - Author+ Stored XSS
Fixed in
Fixed in 3.1.47
CVSS
6.6 (medium)
Published
2024-08-02
Title
Ditty 3.1.39-3.1.45 - Author+ Stored XSS
Fixed in
Fixed in 3.1.46
CVSS
5.9 (medium)
Published
2024-07-15
Title
Ditty < 3.1.45 - Author+ Stored XSS
Fixed in
Fixed in 3.1.45
CVSS
5.9 (medium)
Published
2024-06-22
Title
Ditty < 3.1.43 - Author+ Stored XSS
Fixed in
Fixed in 3.1.43
CVSS
6.8 (medium)
Published
2024-05-07
Title
Ditty – Responsive News Tickers, Sliders, and Lists < 3.1.39 - Authenticated (Contributor+) PHP Object Injection
Fixed in
Fixed in 3.1.39
CVSS
8.8 (high)
Published
2024-05-06
Title
Ditty < 3.1.36 - Author+ Stored XSS
Fixed in
Fixed in 3.1.36
CVSS
5.9 (medium)
Published
2024-04-16
Title
Ditty – Responsive News Tickers, Sliders, and Lists < 3.1.32 - Authenticated (Author+) Stored Cross-Site Scripting
Fixed in
Fixed in 3.1.32
CVSS
5.4 (medium)
Published
2023-11-13
Title
Ditty < 3.1.25 - Missing Authorization via save_ditty_permissions_check
Fixed in
Fixed in 3.1.25
CVSS
5.3 (medium)
Published
2023-08-29
Title
Ditty < 3.1.25 - Reflected XSS
Fixed in
Fixed in 3.1.25
CVSS
7.1 (high)
Published
2023-02-20
Title
Ditty < 3.0.33 - Contributor+ Stored XSS
Fixed in
Fixed in 3.0.33
CVSS
6.8 (medium)
Published
2022-02-09
Title
Ditty (formerly Ditty News Ticker) < 3.0.15 - Reflected Cross-Site Scripting (XSS)
Fixed in
Fixed in 3.0.15
CVSS
4.8 (medium)