Metaphorcreations vulnerabilities

Products

• Ditty 19
• Post Duplicator 6
• Post Duplicator 5
• Ditty – Responsive News Tickers, Sliders, And Lists 2

Newest

• metaphor creations, llc ditty WordPress Ditty plugin <= 3.1.71 - Content Injection vulnerability CVE-2026-119492 4.3 MediumNovember 7, 2026
• metaphor creations, llc ditty WordPress Ditty plugin <= 3.1.71 - Cross Site Scripting (XSS) vulnerability CVE-2026-119493 6.5 MediumNovember 7, 2026
• metaphorcreations ditty WordPress Ditty plugin <= 3.1.69 - Cross Site Scripting (XSS) vulnerability CVE-2026-94461 6.5 MediumSeptember 23, 2026
• metaphor creations ditty Ditty < 3.1.70 Stored XSS via Layout Tag Wrapper Attribute CVE-2026-93339 5.1 MediumSeptember 21, 2026
• metaphorcreations ditty WordPress Ditty plugin <= 3.1.67 - Broken Access Control vulnerability CVE-2026-81274 5.3 MediumAugust 27, 2026
• metaphor creations post duplicator Post Duplicator <= 3.0.11 - Missing Authorization to Authenticated (Contributor+) Post Duplication with Arbitrary Author Attribution CVE-2026-4244 4.3 MediumAugust 22, 2026
• metaphor creations post duplicator Post Duplicator <= 3.0.11 - Authorization Bypass to Authenticated (Contributor+) Post Duplication CVE-2026-4245 4.3 MediumAugust 22, 2026
• metaphorcreations ditty WordPress Ditty plugin <= 3.1.66 - Broken Access Control vulnerability CVE-2026-27355 5.3 MediumJuly 23, 2026
• metaphor creations post duplicator WordPress Post Duplicator plugin <= 3.0.10 - PHP Object Injection vulnerability CVE-2026-39474 8.8 HighJune 15, 2026
• metaphorcreations ditty – responsive news tickers, sliders, and lists Ditty <= 3.1.65 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via ditty_init AJAX Action CVE-2026-9011 7.5 HighMay 22, 2026
• metaphor creations post duplicator Post Duplicator <= 3.0.8 - Missing Authorization to Authenticated (Contributor+) Protected Post Meta Insertion via 'customMetaData' Parameter CVE-2026-2301 4.3 MediumFebruary 25, 2026
• metaphorcreations ditty WordPress Ditty Plugin <= 3.1.58 - Cross Site Scripting (XSS) Vulnerability CVE-2025-60105 6.5 MediumSeptember 26, 2025
• metaphorcreations ditty Ditty < 3.1.58 - Unauthenticated SSRF CVE-2025-8085 EPSS 20.5% 8.6 HighSeptember 8, 2025
• metaphorcreations ditty Ditty – Responsive News Tickers, Sliders, and Lists < 3.1.52 - Author+ Stored XSS CVE-2024-13357 4.8 MediumMay 15, 2025
• metaphor creations post duplicator WordPress Post Duplicator plugin <= 2.35 - Broken Access Control vulnerability CVE-2025-24736 4.3 MediumJanuary 24, 2025
• metaphorcreations metaphor widgets WordPress Metaphor Widgets plugin <= 2.4 - Stored Cross Site Scripting (XSS) vulnerability CVE-2025-23816 6.5 MediumJanuary 16, 2025
• metaphor creations post duplicator Post Duplicator <= 2.36 - Authenticated (Contributor+) Protected Post Disclosure CVE-2024-12472 4.3 MediumJanuary 11, 2025
• metaphorcreations ditty WordPress Ditty plugin <= 3.1.24 - Broken Access Control vulnerability CVE-2023-47764 6.5 MediumDecember 9, 2024
• metaphor creations post duplicator WordPress Post Duplicator plugin <= 2.31 - Broken Access Control vulnerability CVE-2023-49835 4.3 MediumDecember 9, 2024
• metaphorcreations ditty Ditty < 3.1.47 - Author+ Stored XSS CVE-2024-9600 4.8 MediumNovember 21, 2024
• metaphorcreations ditty Ditty 3.1.39-3.1.45 - Author+ Stored XSS CVE-2024-6715 6.1 MediumAugust 23, 2024
• metaphorcreations ditty Ditty < 3.1.45 - Author+ Stored XSS CVE-2024-6710 5.4 MediumAugust 5, 2024
• metaphorcreations ditty Ditty < 3.1.43 - Author+ Stored XSS CVE-2024-5575 4.7 MediumJuly 13, 2024
• metaphorcreations ditty Ditty < 3.1.36 - Author+ Stored XSS CVE-2024-3939 5.4 MediumMay 27, 2024
• metaphorcreations ditty – responsive news tickers, sliders, and lists Ditty – Responsive News Tickers, Sliders, and Lists <= 3.1.38 - Authenticated (Contributor+) PHP Object Injection CVE-2024-3954 8.8 HighMay 9, 2024
• metaphor creations ditty WordPress Ditty plugin <= 3.1.31 - Cross Site Scripting (XSS) vulnerability CVE-2024-32569 6.5 MediumApril 18, 2024
• metaphorcreations ditty Ditty < 3.1.25 - Reflected XSS CVE-2023-4148 6.1 MediumSeptember 25, 2023
• metaphor creations ditty WordPress Ditty Plugin <= 3.0.32 is vulnerable to Cross Site Scripting (XSS) CVE-2023-23874 6.5 MediumMay 3, 2023
• meta4creations post duplicator plugin, metaphorcreations post duplicator +1 more meta4creations Post Duplicator Plugin notices.php mtphr_post_duplicator_notice cross site scripting CVE-2016-15027 3.5 LowFebruary 20, 2023
• metaphorcreations post duplicator A cross-site scripting (XSS) attack can cause arbitrary code (javascript) to run in a user’s... CVE-2021-33852 5.4 MediumMarch 9, 2022
• metaphorcreations ditty, unknown ditty (formerly ditty news ticker) +1 more Ditty (formerly Ditty News Ticker) < 3.0.15 - Reflected Cross-Site Scripting (XSS) CVE-2022-0533 6.1 MediumMarch 7, 2022