Log in Start free

metaphorcreations

Products

ProductCVEsExploitedLatest
Post Duplicator6–Aug 22, 2026
Ditty5–Sep 23, 2026
Ditty – Responsive News Tickers, Sliders, and Lists2–May 22, 2026
Metaphor Widgets1–Jan 16, 2025

Exploited and recent CVEs

  • CVE-2026-94461 Medium 6.5 WordPress Ditty plugin <= 3.1.69 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-81274 Medium 5.3 WordPress Ditty plugin <= 3.1.67 - Broken Access Control vulnerability 0.3%
  • CVE-2026-4244 Medium 4.3 Post Duplicator <= 3.0.11 - Missing Authorization to Authenticated (Contributor+) Post Duplication with Arbitrary Author Attribution 0.3%
  • CVE-2026-4245 Medium 4.3 Post Duplicator <= 3.0.11 - Authorization Bypass to Authenticated (Contributor+) Post Duplication 0.4%
  • CVE-2026-27355 Medium 5.3 WordPress Ditty plugin <= 3.1.66 - Broken Access Control vulnerability 0.4%
  • CVE-2026-39474 High 8.8 WordPress Post Duplicator plugin <= 3.0.10 - PHP Object Injection vulnerability 0.4%
  • CVE-2026-9011 High 7.5 Ditty <= 3.1.65 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via ditty_init AJAX Action 0.5%
  • CVE-2026-2301 Medium 4.3 Post Duplicator <= 3.0.8 - Missing Authorization to Authenticated (Contributor+) Protected Post Meta Insertion via 'customMetaData' Parameter 0.2%
  • CVE-2025-60105 Medium 6.5 WordPress Ditty Plugin <= 3.1.58 - Cross Site Scripting (XSS) Vulnerability 0.2%
  • CVE-2025-24736 Medium 4.3 WordPress Post Duplicator plugin <= 2.35 - Broken Access Control vulnerability 0.3%
  • CVE-2025-23816 Medium 6.5 WordPress Metaphor Widgets plugin <= 2.4 - Stored Cross Site Scripting (XSS) vulnerability 0.4%
  • CVE-2024-12472 Medium 4.3 Post Duplicator <= 2.36 - Authenticated (Contributor+) Protected Post Disclosure 0.3%
  • CVE-2023-47764 Medium 6.5 WordPress Ditty plugin <= 3.1.24 - Broken Access Control vulnerability 0.4%
  • CVE-2024-3954 High 8.8 Ditty – Responsive News Tickers, Sliders, and Lists <= 3.1.38 - Authenticated (Contributor+) PHP Object Injection 0.7%