CVE-2026-9011: Ditty Plugin Exposes Non-Public Content to Anyone (CVSS 7.5)

CVE-2026-9011 is a CVSS 7.5 (High) Missing Authorization vulnerability in the Ditty WordPress plugin that lets anyone read non-public Ditty content.