CVE-2025-8085
The Ditty WordPress plugin before 3.1.58 lacks authorization and authentication for requests to its displayItems endpoint, allowing unauthenticated visitors to make requests to arbitrary URLs.
Vendor
Product
CWE
Yayın Tarihi
2025-09-08 06:15:34
Güncelleme
2026-02-09 18:19:09
Source Identifier
contact@wpscan.com
KEV Date Added
-