Ditty – Responsive News Tickers, Sliders, and Lists

81 Quality Score

Active Installs

20/30

30,000 active installs is modest but solid for a single-purpose ticker plugin, and it scores well above its baseline given the niche focus.

Update Freshness

25/25

Last updated May 2026 against WordPress 6.9.4, indicating an actively maintained codebase that tracks current core releases.

User Rating

14/15

92 out of 100 from 106 ratings is an excellent user satisfaction score and well above average for the slider category.

Support Health

8/15

Only one support thread exists in the data, with 100% resolution, but the sample size is too small to draw strong conclusions about long-term support responsiveness.

WP Compatibility

15/15

Requires PHP 7.4 and WordPress 6.2, which is a reasonable floor and matches the latest tested version cleanly.

Scores higher than 85% of indexed plugins

About

Ditty offers a range of content display options, including its signature news ticker and customizable layouts.

Active Installs 30k+

Rating ★★★★½ 4.6/5

Last Updated 2026-09-23 6:21am GMT

Requires WordPress 6.2+

Tested Up To 7.1.2

Requires PHP 7.4+

Security History

18 known vulnerabilities, all patched

3 High 15 Medium

Most recent: September 21, 2026

View details ▸

Ditty – Responsive News Tickers, Sliders, and Lists <= 3.1.69 - Authenticated (Author+) Stored Cross-Site Scripting Medium

September 21, 2026 Patched in ["3.1.70"] CVE-2026-93339

Ditty – Responsive News Tickers, Sliders, and Lists <= 3.1.67 - Missing Authorization Medium

August 26, 2026 Patched in ["3.1.69"] CVE-2026-81274

Ditty – Responsive News Tickers, Sliders, and Lists <= 3.1.66 - Missing Authorization Medium

July 22, 2026 Patched in ["3.1.67"] CVE-2026-27355

Ditty <= 3.1.65 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via ditty_init AJAX Action High

May 21, 2026 Patched in ["3.1.66"] CVE-2026-9011

Ditty <= 3.1.58 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

September 26, 2025 Patched in ["3.1.59"] CVE-2025-60105

Ditty <= 3.1.57 - Unauthenticated Server-Side Request Forgery High

August 18, 2025 Patched in ["3.1.58"] CVE-2025-8085

Ditty <= 3.1.51 - Authenticated (Author+) Stored Cross-Site Scripting Medium

March 6, 2025 Patched in ["3.1.52"] CVE-2024-13357

Ditty <= 3.1.46 - Authenticated (Author+) Stored Cross-Site Scripting Medium

October 31, 2024 Patched in ["3.1.47"] CVE-2024-9600

Ditty 3.1.39 - 3.1.45 - Authenticated (Author+) Stored Cross-Site Scripting Medium

August 2, 2024 Patched in ["3.1.46"] CVE-2024-6715

Ditty – Responsive News Tickers, Sliders, and Lists <= 3.1.44 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

July 15, 2024 Patched in ["3.1.45"] CVE-2024-6710

Ditty – Responsive News Tickers, Sliders, and Lists <= 3.1.42 - Authenticated (Author+) Stored Cross-Site Scripting Medium

June 22, 2024 Patched in ["3.1.43"] CVE-2024-5575

Ditty – Responsive News Tickers, Sliders, and Lists <= 3.1.38 - Authenticated (Contributor+) PHP Object Injection High

May 7, 2024 Patched in ["3.1.39"] CVE-2024-3954

Ditty <= 3.1.35 - Authenticated (Author+) Stored Cross-Site Scripting Medium

May 6, 2024 Patched in ["3.1.36"] CVE-2024-3939

Ditty – Responsive News Tickers, Sliders, and Lists <= 3.1.31 - Authenticated (Author+) Stored Cross-Site Scripting Medium

April 16, 2024 Patched in ["3.1.32"] CVE-2024-32569

Ditty <= 3.1.24 - Missing Authorization via save_ditty_permissions_check Medium

November 13, 2023 Patched in ["3.1.25"] CVE-2023-47764

Ditty <= 3.1.24 - Reflected Cross-Site Scripting Medium

August 29, 2023 Patched in ["3.1.25"] CVE-2023-4148

Ditty <= 3.0.32 - Authenticated (Contributor+) Stored Cross-Scripting via Shortcode Medium

February 20, 2023 Patched in ["3.0.33"] CVE-2023-23874

Ditty (formerly Ditty News Ticker) <= 3.0.14 - Reflected Cross-Site Scripting Medium

February 9, 2022 Patched in ["3.0.15"] CVE-2022-0533

What It Does

Ditty is a WordPress plugin that creates animated news tickers, content sliders, and scrollable lists on any page or post via shortcodes and Gutenberg blocks. It pulls content from posts, custom post types, RSS feeds, or manual entries, then displays it in multiple layouts including horizontal tickers, vertical lists, and slideshow-style grids. The plugin handles responsive sizing and basic styling controls out of the box.

Who It's For

This plugin fits news outlets, sports sites, and financial blogs that need a continuously scrolling ticker for headlines, stock quotes, or breaking updates. It also suits marketers running product launch announcements or event countdown banners where a scrolling marquee grabs attention without taking up much page space.

Who Should Skip It

If you only need a static post grid or a one-off image carousel, Ditty adds more configuration surface than you need. Sites running heavy page builders like Elementor or Divi already have slider widgets baked in, so this becomes redundant overhead.

The Bottom Line

Ditty earns an 81.35 overall score by combining strong maintenance, high user ratings, and broad compatibility into a focused niche plugin. It is the right pick when you specifically need ticker-style content display and not just another slider. For static grids or visual slider builders, the alternatives listed above will serve you better.

Related Plugins

The Post Grid 84/100

Pick this when your goal is a static post grid or filterable archive layout rather than an animated ticker.

Depicter 83/100

Pick this when you need a visual, drag-and-drop slider builder for hero banners and popups rather than a lightweight news ticker.

Prime Slider Addons for Elementor 83/100

Pick this if you already build with Elementor and want themed slider modules bundled into your page builder workflow.

Blog Designer Pack 82/100

Pick this for broader blog layout customization, including carousels and category grids, when a ticker is not your primary need.

Ultimate Responsive Image Slider 81/100

Pick this for a straightforward image-only slider when you do not need text tickers or RSS-driven content.