Skip to contentMetaphor Creations vulnerabilities
Newest
- metaphor creations post duplicatorPost Duplicator < 3.0.18 - Admin+ Privilege Escalation via Unvalidated Capability AssignmentCVE-2026-1218757.2 High
- metaphor creations post duplicatorPost Duplicator < 3.0.18 - Admin+ Arbitrary Option Update via Unvalidated Option NameCVE-2026-1218747.2 High
- metaphor creations post duplicatorPost Duplicator < 3.0.17 - Contributor+ Draft and Private Post Title DisclosureCVE-2026-1117402.7 Low
- metaphor creations dittyDitty < 3.1.70 Stored XSS via Layout Tag Wrapper AttributeCVE-2026-933395.1 Medium
- metaphor creations post duplicatorPost Duplicator <= 3.0.11 - Missing Authorization to Authenticated (Contributor+) Post Duplication with Arbitrary Author AttributionCVE-2026-42444.3 Medium
- metaphor creations post duplicatorPost Duplicator <= 3.0.11 - Authorization Bypass to Authenticated (Contributor+) Post DuplicationCVE-2026-42454.3 Medium
- metaphor creations post duplicatorPost Duplicator < 3.0.15 - Contributor+ PHP Object Injection via customMetaDataCVE-2026-107497.2 High
- metaphor creations post duplicatorWordPress Post Duplicator plugin <= 3.0.10 - PHP Object Injection vulnerabilityCVE-2026-394748.8 High
- metaphor creations post duplicatorPost Duplicator <= 3.0.8 - Missing Authorization to Authenticated (Contributor+) Protected Post Meta Insertion via 'customMetaData' ParameterCVE-2026-23014.3 Medium
- metaphor creations post duplicatorWordPress Post Duplicator plugin <= 2.35 - Broken Access Control vulnerabilityCVE-2025-247364.3 Medium
- metaphor creations post duplicatorPost Duplicator <= 2.36 - Authenticated (Contributor+) Protected Post DisclosureCVE-2024-124724.3 Medium
- metaphor creations post duplicatorWordPress Post Duplicator plugin <= 2.31 - Broken Access Control vulnerabilityCVE-2023-498354.3 Medium
- metaphor creations dittyWordPress Ditty plugin <= 3.1.31 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-325696.5 Medium
- metaphor creations dittyWordPress Ditty Plugin <= 3.0.32 is vulnerable to Cross Site Scripting (XSS)CVE-2023-238746.5 Medium