Ditty – Responsive News Tickers, Sliders, and Lists

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 86% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price.

Reviewers keep praising fast, personal support and how easy the ticker is to set up, with a couple of older reports of a display glitch and a shortcode that wouldn't work.

1. ★★★★★ Edvard Larsson

   8mo ago

   This is the best plugin I have tested. It is super easy to install and setup. Also the support is great. Jim is super and helpful. Edvard Larsson

   Read on wp.org ↗
2. ★★★★★ malcantarag

   1.2y ago

   Super fast and efficient!I really appreciate how quickly my request was handled. The response was prompt, professional, and everything was resolved smoothly. Excellent service — thank you!

   Read on wp.org ↗
3. ★★★★★ dataworxulm

   1.2y ago

   That’s the definition of support: fast, competent, personal.And it’s not just the support that’s great, but also the plugin itself. I use the Pro version and am happy with it.

   Read on wp.org ↗
4. ★★★★★ CJW

   1.6y ago

   Using this for an Allotments Society website I am managing and it’s perfect for updating everyone, rather than having to write up posts each time. Thank you!

   Read on wp.org ↗
5. ★★★★★ koerscht

   2.2y ago

   Ich bin mit dem Ticker sehr zufreieden.. Einfache Handhabung, grade wenn man keinen Boch auf Programmieren hat. Leider wird mir der Ticker seit einiger Zeit nicht mehr richtig angezeigt. Ich kann den ersten Teil sehen aber ich kann den Ticker nicht bearbeiten, nicht runterscrollen. ich habe bereits andere Browser ausprobiert, dort geht es aber auch nicht. Bitte schnell beheben.

   Read on wp.org ↗
6. ★★★★★ raffetali

   2.5y ago

   Thank you so much for your support, help and patience.Thank you so much for your quick and accurate response.

   Read on wp.org ↗
7. ★★★★★ halleck

   2.5y ago

   I have been using Ditty for years and have had great support and consistent updates. I love this plugin!

   Read on wp.org ↗
8. ★★★★★ ISeeTWizard

   2.5y ago

   I love this plugin – It’s easy to use and if you have a question you get a fast response from the support. As example: I use a plugin with custom fields for categories and after several hours I had the solution to display them thanks to the support – simply perfect I use it now for only about a year but going to use it as long as possible 😛 Perfect for displaying blog entries, latest additions on the site and much more. The Facebook option or Instagram one I didn’t use now as for now I didn’t need it but who knows, maybe in the future…

   Read on wp.org ↗

Recent releases and news for this plugin

1. 2026-08-22 Version 3.1.69 Security fix: require the manage_ditty_settings capability for extension license AJAX actions Updated ip-address dev dependency to patch leading-zero IPv4 parsing (GHSA-mwp4-54f8-5fhr) Updated shell-quote dev dependency 3.1.69
2. 2026-07-25 Version 3.1.68 Added a reusable helper for listing all registered WordPress image sizes Exposed registered image sizes to the Ditty Editor via dittyEditorVars for use by extensions 3.1.68
3. 2026-07-24 Version 3.1.67 Security fix: require the manage_options capability to delete the Ditty cache via the ditty_delete_cache request parameter Updated adm-zip dev dependency to patch a denial-of-service vulnerability (CVE-2026-39244) 3.1.67
4. 2026-05-19 Version 3.1.66 Security fix: prevent unauthenticated disclosure of non-published Ditty content via the ditty_init AJAX action Restrict live updates AJAX action to published Dittys or users with edit capability Only honor the editor fla 3.1.66
5. 2026-05-14 Version 3.1.65 Security and vulnerability updates 3.1.65
6. 2026-03-12 Version 3.1.64 Updated axios dependency to fix DoS vulnerability (CVE in mergeConfig) Added Sort by (Alphabetical) field for all item types – choose which merge tag is used for alphabetical sorting (default: content) Added PHP filter d 3.1.64

16 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 5.3 Ditty – Responsive News Tickers, Sliders, and Lists <= 3.1.66 - Missing Authorization ↗
   2026-07-22 CVE-2026-27355 Missing Authorization Affects <= 3.1.66 Patched in 3.1.67
2. High · 7.5 Ditty <= 3.1.65 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via ditty_init AJAX Action ↗
   2026-05-21 CVE-2026-9011 Missing Authorization Affects <= 3.1.65 Patched in 3.1.66
3. Medium · 6.4 Ditty <= 3.1.58 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2025-09-26 CVE-2025-60105 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.1.58 Patched in 3.1.59
4. High · 7.2 Ditty <= 3.1.57 - Unauthenticated Server-Side Request Forgery ↗
   2025-08-18 CVE-2025-8085 Server-Side Request Forgery (SSRF) Affects <= 3.1.57 Patched in 3.1.58
5. Medium · 6.4 Ditty <= 3.1.51 - Authenticated (Author+) Stored Cross-Site Scripting ↗
   2025-03-06 CVE-2024-13357 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.1.51 Patched in 3.1.52
6. Medium · 6.4 Ditty <= 3.1.46 - Authenticated (Author+) Stored Cross-Site Scripting ↗
   2024-10-31 CVE-2024-9600 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.1.46 Patched in 3.1.47
7. Medium · 6.4 Ditty 3.1.39 - 3.1.45 - Authenticated (Author+) Stored Cross-Site Scripting ↗
   2024-08-02 CVE-2024-6715 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects 3.1.39 - 3.1.45 Patched in 3.1.46
8. Medium · 6.4 Ditty – Responsive News Tickers, Sliders, and Lists <= 3.1.44 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2024-07-15 CVE-2024-6710 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.1.44 Patched in 3.1.45
9. Medium · 6.4 Ditty – Responsive News Tickers, Sliders, and Lists <= 3.1.42 - Authenticated (Author+) Stored Cross-Site Scripting ↗
   2024-06-22 CVE-2024-5575 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.1.42 Patched in 3.1.43
10. High · 8.8 Ditty – Responsive News Tickers, Sliders, and Lists <= 3.1.38 - Authenticated (Contributor+) PHP Object Injection ↗
    2024-05-07 CVE-2024-3954 Deserialization of Untrusted Data Affects <= 3.1.38 Patched in 3.1.39
11. Medium · 6.4 Ditty <= 3.1.35 - Authenticated (Author+) Stored Cross-Site Scripting ↗
    2024-05-06 CVE-2024-3939 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.1.35 Patched in 3.1.36
12. Medium · 5.4 Ditty – Responsive News Tickers, Sliders, and Lists <= 3.1.31 - Authenticated (Author+) Stored Cross-Site Scripting ↗
    2024-04-16 CVE-2024-32569 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.1.31 Patched in 3.1.32
13. Medium · 5.3 Ditty <= 3.1.24 - Missing Authorization via save_ditty_permissions_check ↗
    2023-11-13 CVE-2023-47764 Missing Authorization Affects <= 3.1.24 Patched in 3.1.25
14. Medium · 6.1 Ditty <= 3.1.24 - Reflected Cross-Site Scripting ↗
    2023-08-29 CVE-2023-4148 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 3.1.25 Patched in 3.1.25
15. Medium · 6.4 Ditty <= 3.0.32 - Authenticated (Contributor+) Stored Cross-Scripting via Shortcode ↗
    2023-02-20 CVE-2023-23874 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.0.32 Patched in 3.0.33
16. Medium · 6.1 Ditty (formerly Ditty News Ticker) <= 3.0.14 - Reflected Cross-Site Scripting ↗
    2022-02-09 CVE-2022-0533 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 3.0.15 Patched in 3.0.15

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 117 languages, 0 at 90% or more

Plus 93 more locales with partial translations.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2025-06-27 40K+ → 30K+ down after 2 days in tier
2. 2025-06-25 30K+ → 40K+ up after 1 days in tier
3. 2025-06-24 40K+ → 30K+ down

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Slider Pro 4K+ installs · 4.5★ · 3 shared tags A
• Social LikeBox & Feed 10K+ installs · 3.5★ · 2 shared tags B
• News Ticker Widget for Elementor 4K+ installs · 3.9★ · 2 shared tags B
• Block Slider – Responsive Image Slider, Video Slider & Post Slider 3K+ installs · 3.4★ · 2 shared tags D
• Swipe Slider – Make dynamic slider with solid, gradient, or image background 3K+ installs · 4.1★ · 2 shared tags B
• Slider Pro 2K+ installs · 3.6★ · 2 shared tags D

Embed this report card

Drop a live Pulse card for Ditty – Responsive News Tickers, Sliders, and Lists into a readme, a review or a deck. It updates itself.

Ditty – Responsive News Tickers, Sliders, and Lists: 30K+ active installs, 4.6★ (106 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/ditty-news-ticker