Input validation vulnerability in Ditty – Responsive News Tickers, Sliders, and Lists 3.1.46

A plugin for WordPress called “The Ditty” has a security issue where hackers can inject harmful code through the admin settings. This can happen in all versions up to version 3.1.46 because the plugin does not properly clean up user input. This means that if someone with high enough access to the site (like an author or higher) puts malicious code in the settings, it can run whenever anyone visits a page with that code.