Ditty – Responsive News Tickers, Sliders, and Lists <= 3.1.38 - Authenticated (Contributor+) PHP Object Injection
CVE-2024-3954
Key Information:
- Vendor
- Wordpress
- Vendor
- CVE Published:
- 14 May 2024
Summary
The Ditty plugin for WordPress contains a vulnerability that allows for PHP Object Injection due to improper handling of untrusted input during the addition of new content. This issue affects all versions of the plugin up to 3.1.38. Authenticated users with contributor-level access and above can exploit this flaw to inject malicious PHP objects. While there is no known primitive object propagation (POP) chain within the plugin itself, the presence of a POP chain through other installed plugins or themes could potentially enable attackers to perform destructive actions such as deleting arbitrary files, extracting sensitive data, or executing unauthorized code. Users are advised to update to the latest version of the Ditty plugin to mitigate these risks.
Affected Version(s)
Ditty – Responsive News Tickers, Sliders, and Lists * <= 3.1.38
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved