Medium · 6.5 CVE-2023-47764 EUVD-2023-51862GHSA-rfxf-qhcv-3p8m

WordPress Ditty plugin <= 3.1.24 - Broken Access Control vulnerability

Published Dec 9, 2024 · Updated Apr 29, 2026 · Assigned by Patchstack

Vendor: Metaphor Creations Product: Ditty

Description

Missing Authorization vulnerability in metaphorcreations Ditty ditty-news-ticker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ditty: from n/a through <= 3.1.24.

Affected products

Vendor	Product	Affected	Fixed
metaphorcreations	Ditty	≤ 3.1.24	—

References

https://patchstack.com/database/Wordpress/Plugin/ditty-news-ticker/vulnerability/wordpress-ditty-plugin-3-1-24-broken-access-control-vulnerability?_s_id=cve vdb-entry