Ditty vulnerabilities
We track 1 vulnerability in Ditty products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 8, 2025.
1vulnerabilities
0critical
1high
0exploited
8.6average CVSS score
Latest Ditty vulnerabilities
- 8.6 High severity
Ditty: Server-Side Request Forgery
The Ditty WordPress plugin before 3.1.58 lacks authorization and authentication for requests to its displayItems endpoint, allowing unauthenticated visitors to make requests to arbitrary URLs.