CVE-2026-81274: WordPress Ditty plugin <= 3.1.67 - Broken Access Control vulnerability
Published Aug 27, 2026
·Updated
Subscriber Broken Access Control in Ditty <= 3.1.67 versions.
Affected Software
1 affected component
WordPress Ditty plugin<=3.1.67
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Ditty Pluginto a version that resolves this vulnerability.Fixed in 3.1.69
Event History
Aug 27, 2026
CVE Published
via MITRE·09:00 AM
Data Sourced
via MITRE·09:00 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·10:16 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Does an attacker need a WordPress account or user interaction to exploit this issue?
No. The supplied vector indicates network-based exploitation with no privileges required and no user interaction required.
2
What is the confirmed security impact?
The reported impact is limited to integrity, rated low. No confidentiality or availability impact is indicated.