CVE-2025-8085 Ditty < 3.1.58 - Unauthenticated SSRF
Unauthenticated attackers can exploit the Ditty WordPress plugin to make arbitrary server-side requests, potentially accessing internal resources.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-8085?
CVE-2025-8085 is a high-severity server-side request forgery vulnerability in Unknown Ditty, published on 8 Sep 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The Ditty WordPress plugin before 3.1.58 lacks authorization and authentication for requests to its displayItems endpoint, allowing unauthenticated visitors to make requests to arbitrary URLs.
Weakness: CWE-918
Which versions are affected by CVE-2025-8085?
It affects 1 product.
Products include Metaphorcreations Ditty.
How do I fix CVE-2025-8085?
No fix has been published for CVE-2025-8085 yet. Limit exposure of the affected software until one is available.
Upgrade, and send outbound requests through an allow-list that blocks internal addresses. More about Server-side request forgery.
Is CVE-2025-8085 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-8085 exists.
Public exploit code: 1 Nuclei template.
Other vulnerabilities in Unknown Ditty
- CVE-2023-23874 WordPress Ditty Plugin <= 3.0.32 is vulnerable to Cross Site Scripting (XSS)
- CVE-2024-6715 Ditty 3.1.39-3.1.45 - Author+ Stored XSS
- CVE-2023-4148 Ditty < 3.1.25 - Reflected XSS
- CVE-2022-0533 Ditty (formerly Ditty News Ticker) < 3.0.15 - Reflected Cross-Site Scripting (XSS)
- CVE-2024-6710 Ditty < 3.1.45 - Author+ Stored XSS
Sources
Also known as GHSA-5w55-fgg7-m5gx.