{"api_version":"v1","generated_at":"2026-10-08T12:20:00+00:00","product":{"cve_count":5,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-metaphorcreations-ditty-d8ffdbae870d","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/ditty","name":"Ditty","next_cursor":null,"observations":[{"affected":"Ditty: n/a \u2264 3.1.69","affected_versions_present":true,"cve_id":"CVE-2026-94461","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-94461","fixed":"Update the WordPress Ditty plugin to the latest available version (at least 3.1.70).","last_modified":"2026-09-23T18:50:46.605Z","patch_url":"https://patchstack.com/database/wordpress/plugin/ditty-news-ticker/vulnerability/wordpress-ditty-plugin-3-1-69-cross-site-scripting-xss-vulnerability?_s_id=cve","primary_source":"","published":"2026-09-23T18:14:28.137Z"},{"affected":"n/a \u2264 3.1.67","affected_versions_present":true,"cve_id":"CVE-2026-81274","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-81274","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-27T12:31:07.802Z","patch_url":"","primary_source":"","published":"2026-08-27T09:00:09.177Z"},{"affected":"n/a \u2264 3.1.66","affected_versions_present":true,"cve_id":"CVE-2026-27355","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-27355","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-07-23T14:18:16.707Z","patch_url":"","primary_source":"","published":"2026-07-23T11:17:53.078Z"},{"affected":"\u2264 3.1.58","affected_versions_present":true,"cve_id":"CVE-2025-60105","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-60105","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-28T16:13:54.879Z","patch_url":"","primary_source":"","published":"2025-09-26T08:31:24.684Z"},{"affected":"\u2264 3.1.24","affected_versions_present":true,"cve_id":"CVE-2023-47764","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-47764","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-29T09:51:51.276Z","patch_url":"","primary_source":"","published":"2024-12-09T11:30:48.258Z"}],"source_generated_at":"2026-10-08T06:18:52.353Z","vendor":"metaphorcreations"}}