CVE-2026-94461MEDIUM NVDCVSS Score 6.5Severity MEDIUMPublished Sep 23, 2026Vendor unknownDescriptionContributor Cross Site Scripting (XSS) in Ditty <= 3.1.69 versions.Referenceshttps://patchstack.com/database/wordpress/plugin/ditty-news-ticker/vulnerability/wordpress-ditty-plugin-3-1-69-cross-site-scripting-xss-vulnerability?_s_id=cve