CVE-2023-23874

Mô tả

Tham khảo

• patchstack.com/database/vulnerability/ditty-news-ticker/wordpress-ditty-wordpress-plugin-responsive-slider-list-and-ticker-display-plugin-3-0-32-cross-site-scripting-xss-vulnerability · Third Party Advisory

Lỗ hổng khác của ditty

• CVE-2025-8085CAO 8.6The Ditty WordPress plugin before 3.1.58 lacks authorization and authentication for requests to its displayItems endpoint, allowing unauthe…
• CVE-2024-13357TRUNG BÌNH 4.8The Ditty WordPress plugin before 3.1.52 does not sanitise and escape some of its settings, which could allow high privilege users such as …
• CVE-2024-9600TRUNG BÌNH 4.8The Ditty WordPress plugin before 3.1.47 does not sanitise and escape some of its settings, which could allow high privilege users such as …
• CVE-2024-6715TRUNG BÌNH 6.1The Ditty WordPress plugin before 3.1.46 re-introduced a previously fixed security issue (https://wpscan.com/vulnerability/80a9eb3a-2cb1-48…
• CVE-2024-6710TRUNG BÌNH 5.4The Ditty WordPress plugin before 3.1.45 does not sanitise and escape some parameters, which could allow users with a role as low as Contri…