CVE-2025-8085

Ditty < 3.1.58 - Unauthenticated SSRF PUBLISHED

Description (CNA)

The Ditty WordPress plugin before 3.1.58 lacks authorization and authentication for requests to its displayItems endpoint, allowing unauthenticated visitors to make requests to arbitrary URLs.

Affected (CNA)

Vendor / product	Versions
Unknown / Ditty	affected 0 before 3.1.58

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/f42c37bb-1ae0-49ab-bd81-7864dff0fcff/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.