CVE-2025-8085 – Ditty < 3.1.58 – Unauthenticated SSRF

CVE ID : CVE-2025-8085

Published : Sept. 8, 2025, 6:15 a.m. | 1 hour, 11 minutes ago

Description : The Ditty WordPress plugin before 3.1.58 lacks authorization and authentication for requests to its displayItems endpoint, allowing unauthenticated visitors to make requests to arbitrary URLs.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…