Metaphorcreations Ditty – Responsive News Tickers, Sliders, And Lists
2 CVEs affecting Metaphorcreations Ditty – Responsive News Tickers, Sliders, And Lists. Latest disclosed: 2026-05-22. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-3954 | High | 8.8 | 2024-05-09 | The Ditty plugin for WordPress is vulnerable to PHP Object Injection in all versions up to 3.1.38 via deserialization of untrusted input when adding a new ditt… |
CVE-2026-9011 | High | 7.5 | 2026-05-22 | The Ditty – Responsive News Tickers, Sliders, and Lists plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.1.65… |