Описание
The Ditty WordPress plugin before 3.1.58 lacks authorization and authentication for requests to its displayItems endpoint, allowing unauthenticated visitors to make requests to arbitrary URLs.
EPSS
Процентиль: 10%
0.00038
Низкий
8.6 High
CVSS3
Дефекты
Связанные уязвимости
CVSS3: 8.6
github
6 дней назад
The Ditty WordPress plugin before 3.1.58 lacks authorization and authentication for requests to its displayItems endpoint, allowing unauthenticated visitors to make requests to arbitrary URLs.
EPSS
Процентиль: 10%
0.00038
Низкий
8.6 High
CVSS3