CVE-2022-0533

概要

参考情報

• plugins.trac.wordpress.org/changeset/2675223/ditty-news-ticker · Patch
• wpscan.com/vulnerability/40f36692-c898-4441-ad24-2dc17856bd74 · Exploit

ditty のその他の脆弱性

• CVE-2025-8085高 8.6The Ditty WordPress plugin before 3.1.58 lacks authorization and authentication for requests to its displayItems endpoint, allowing unauthe…
• CVE-2024-13357中 4.8The Ditty WordPress plugin before 3.1.52 does not sanitise and escape some of its settings, which could allow high privilege users such as …
• CVE-2024-9600中 4.8The Ditty WordPress plugin before 3.1.47 does not sanitise and escape some of its settings, which could allow high privilege users such as …
• CVE-2024-6715中 6.1The Ditty WordPress plugin before 3.1.46 re-introduced a previously fixed security issue (https://wpscan.com/vulnerability/80a9eb3a-2cb1-48…
• CVE-2024-6710中 5.4The Ditty WordPress plugin before 3.1.45 does not sanitise and escape some parameters, which could allow users with a role as low as Contri…