ME
Vendor
metaphorcreations
28
CVEs
0
On KEV
0
New 30D
Products
DI8.6
Ditty
metaphorcreations
16 CVEs0 on KEV0 new
PD8.8
Post Duplicator
metaphorcreations
9 CVEs0 on KEV0 new
DR8.8
Ditty – Responsive News Tickers, Sliders, and Lists
metaphorcreations
2 CVEs0 on KEV0 new
MW6.5
Metaphor Widgets
metaphorcreations
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-94461 | DI Ditty metaphorcreations | 6.5 | Sep 23 | WordPress Ditty plugin <= 3.1.69 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-81274 | DI Ditty metaphorcreations | 5.3 | Aug 27 | WordPress Ditty plugin <= 3.1.67 - Broken Access Control vulnerability |
| CVE-2026-4244 | PD Post Duplicator metaphorcreations | 4.3 | Aug 22 | Post Duplicator <= 3.0.11 - Missing Authorization to Authenticated (Contributor+) Post Duplication with Arbitrary Author Attribution |
| CVE-2026-4245 | PD Post Duplicator metaphorcreations | 4.3 | Aug 22 | Post Duplicator <= 3.0.11 - Authorization Bypass to Authenticated (Contributor+) Post Duplication |
| CVE-2026-27355 | DI Ditty metaphorcreations | 5.3 | Jul 23 | WordPress Ditty plugin <= 3.1.66 - Broken Access Control vulnerability |
| CVE-2026-39474 | PD Post Duplicator metaphorcreations | 8.8 | Jun 15 | WordPress Post Duplicator plugin <= 3.0.10 - PHP Object Injection vulnerability |
| CVE-2026-9011 | DR Ditty – Responsive News Tickers, Sliders, and Lists metaphorcreations | 7.5 | May 22 | Ditty <= 3.1.65 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via ditty_init AJAX Action |
| CVE-2026-2301 | PD Post Duplicator metaphorcreations | 4.3 | Feb 25 | Post Duplicator <= 3.0.8 - Missing Authorization to Authenticated (Contributor+) Protected Post Meta Insertion via 'customMetaData' Parameter |
| CVE-2025-60105 | DI Ditty metaphorcreations | 6.5 | Sep 26 | WordPress Ditty Plugin <= 3.1.58 - Cross Site Scripting (XSS) Vulnerability |
| CVE-2025-8085 | DI Ditty Metaphorcreations | 8.6 | Sep 8 | Ditty < 3.1.58 - Unauthenticated SSRF |
| CVE-2024-13357 | DI Ditty Metaphorcreations | 4.8 | May 15 | Ditty – Responsive News Tickers, Sliders, and Lists < 3.1.52 - Author+ Stored XSS |
| CVE-2025-24736 | PD Post Duplicator metaphorcreations | 4.3 | Jan 24 | WordPress Post Duplicator plugin <= 2.35 - Broken Access Control vulnerability |
| CVE-2025-23816 | MW Metaphor Widgets metaphorcreations | 6.5 | Jan 16 | WordPress Metaphor Widgets plugin <= 2.4 - Stored Cross Site Scripting (XSS) vulnerability |
| CVE-2024-12472 | PD Post Duplicator metaphorcreations | 4.3 | Jan 11 | Post Duplicator <= 2.36 - Authenticated (Contributor+) Protected Post Disclosure |
| CVE-2023-47764 | DI Ditty metaphorcreations | 6.5 | Dec 9 | WordPress Ditty plugin <= 3.1.24 - Broken Access Control vulnerability |
| CVE-2023-49835 | PD Post Duplicator Metaphorcreations | 4.3 | Dec 9 | WordPress Post Duplicator plugin <= 2.31 - Broken Access Control vulnerability |
| CVE-2024-9600 | DI Ditty Metaphorcreations | 4.8 | Nov 21 | Ditty < 3.1.47 - Author+ Stored XSS |
| CVE-2024-6715 | DI Ditty Metaphorcreations | 6.1 | Aug 23 | Ditty 3.1.39-3.1.45 - Author+ Stored XSS |
| CVE-2024-6710 | DI Ditty Metaphorcreations | 5.4 | Aug 5 | Ditty < 3.1.45 - Author+ Stored XSS |
| CVE-2024-5575 | DI Ditty Metaphorcreations | 4.7 | Jul 13 | Ditty < 3.1.43 - Author+ Stored XSS |
| CVE-2024-3939 | DI Ditty Metaphorcreations | 5.4 | May 27 | Ditty < 3.1.36 - Author+ Stored XSS |
| CVE-2024-3954 | DR Ditty – Responsive News Tickers, Sliders, and Lists metaphorcreations | 8.8 | May 9 | Ditty – Responsive News Tickers, Sliders, and Lists <= 3.1.38 - Authenticated (Contributor+) PHP Object Injection |
| CVE-2024-32569 | DI Ditty Metaphorcreations | 6.5 | Apr 18 | WordPress Ditty plugin <= 3.1.31 - Cross Site Scripting (XSS) vulnerability |
| CVE-2023-4148 | DI Ditty Metaphorcreations | 6.1 | Sep 25 | Ditty < 3.1.25 - Reflected XSS |
| CVE-2023-23874 | DI Ditty Metaphorcreations | 5.4 | May 3 | WordPress Ditty Plugin <= 3.0.32 is vulnerable to Cross Site Scripting (XSS) |
| CVE-2016-15027 | PD Post Duplicator Metaphorcreations | 6.1 | Feb 20 | meta4creations Post Duplicator Plugin notices.php mtphr_post_duplicator_notice cross site scripting |
| CVE-2021-33852 | PD Post Duplicator Metaphorcreations | 5.4 | Mar 10 | A cross-site scripting (XSS) attack can cause arbitrary code (JavaScript) to run in a user's browser and can use an application as the vehicle for the attack |
| CVE-2022-0533 | DI Ditty Metaphorcreations | 6.1 | Mar 7 | The Ditty (formerly Ditty News Ticker) WordPress plugin before 3.0.15 is affected by a Reflected Cross-Site Scripting (XSS) vulnerability |