Metaphorcreations Ditty vulnerabilities

• metaphor creations, llc ditty WordPress Ditty plugin <= 3.1.71 - Content Injection vulnerability CVE-2026-119492 4.3 MediumNovember 7, 2026
• metaphor creations, llc ditty WordPress Ditty plugin <= 3.1.71 - Cross Site Scripting (XSS) vulnerability CVE-2026-119493 6.5 MediumNovember 7, 2026
• metaphorcreations ditty WordPress Ditty plugin <= 3.1.69 - Cross Site Scripting (XSS) vulnerability CVE-2026-94461 6.5 MediumSeptember 23, 2026
• metaphor creations ditty Ditty < 3.1.70 Stored XSS via Layout Tag Wrapper Attribute CVE-2026-93339 5.1 MediumSeptember 21, 2026
• metaphorcreations ditty WordPress Ditty plugin <= 3.1.67 - Broken Access Control vulnerability CVE-2026-81274 5.3 MediumAugust 27, 2026
• metaphorcreations ditty WordPress Ditty plugin <= 3.1.66 - Broken Access Control vulnerability CVE-2026-27355 5.3 MediumJuly 23, 2026
• metaphorcreations ditty – responsive news tickers, sliders, and lists Ditty <= 3.1.65 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via ditty_init AJAX Action CVE-2026-9011 7.5 HighMay 22, 2026
• metaphorcreations ditty WordPress Ditty Plugin <= 3.1.58 - Cross Site Scripting (XSS) Vulnerability CVE-2025-60105 6.5 MediumSeptember 26, 2025
• metaphorcreations ditty Ditty < 3.1.58 - Unauthenticated SSRF CVE-2025-8085 EPSS 20.5% 8.6 HighSeptember 8, 2025
• metaphorcreations ditty Ditty – Responsive News Tickers, Sliders, and Lists < 3.1.52 - Author+ Stored XSS CVE-2024-13357 4.8 MediumMay 15, 2025
• metaphorcreations ditty WordPress Ditty plugin <= 3.1.24 - Broken Access Control vulnerability CVE-2023-47764 6.5 MediumDecember 9, 2024
• metaphorcreations ditty Ditty < 3.1.47 - Author+ Stored XSS CVE-2024-9600 4.8 MediumNovember 21, 2024
• metaphorcreations ditty Ditty 3.1.39-3.1.45 - Author+ Stored XSS CVE-2024-6715 6.1 MediumAugust 23, 2024
• metaphorcreations ditty Ditty < 3.1.45 - Author+ Stored XSS CVE-2024-6710 5.4 MediumAugust 5, 2024
• metaphorcreations ditty Ditty < 3.1.43 - Author+ Stored XSS CVE-2024-5575 4.7 MediumJuly 13, 2024
• metaphorcreations ditty Ditty < 3.1.36 - Author+ Stored XSS CVE-2024-3939 5.4 MediumMay 27, 2024
• metaphorcreations ditty – responsive news tickers, sliders, and lists Ditty – Responsive News Tickers, Sliders, and Lists <= 3.1.38 - Authenticated (Contributor+) PHP Object Injection CVE-2024-3954 8.8 HighMay 9, 2024
• metaphor creations ditty WordPress Ditty plugin <= 3.1.31 - Cross Site Scripting (XSS) vulnerability CVE-2024-32569 6.5 MediumApril 18, 2024
• metaphorcreations ditty Ditty < 3.1.25 - Reflected XSS CVE-2023-4148 6.1 MediumSeptember 25, 2023
• metaphor creations ditty WordPress Ditty Plugin <= 3.0.32 is vulnerable to Cross Site Scripting (XSS) CVE-2023-23874 6.5 MediumMay 3, 2023
• metaphorcreations ditty, unknown ditty (formerly ditty news ticker) +1 more Ditty (formerly Ditty News Ticker) < 3.0.15 - Reflected Cross-Site Scripting (XSS) CVE-2022-0533 6.1 MediumMarch 7, 2022