Skip to content

Metaphor Creations

Products

Product	CVEs	Exploited	Latest
Ditty	3	–	Sep 21, 2026
Post Duplicator	1	–	Dec 9, 2024

Exploited and recent CVEs

CVE-2026-93339 Medium 5.4 Ditty < 3.1.70 Stored XSS via Layout Tag Wrapper Attribute 0.3%
CVE-2023-49835 Medium 4.3 WordPress Post Duplicator plugin <= 2.31 - Broken Access Control vulnerability 0.4%
CVE-2024-32569 Medium 6.5 WordPress Ditty plugin <= 3.1.31 - Cross Site Scripting (XSS) vulnerability 0.3%
CVE-2023-23874 Medium 6.5 WordPress Ditty Plugin <= 3.0.32 is vulnerable to Cross Site Scripting (XSS) 0.4%