Metaphor Creations

4 CVEs across 2 Metaphor Creations products. Browse Metaphor Creations vulnerabilities, severities, and proof-of-concept exploits.

Metaphor Creations products with known CVEs

ProductCVEs
Ditty3
Post Duplicator1
Metaphor Creations CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-93339Medium5.42026-09-21Metaphor Creations Ditty (ditty-news-ticker) before 3.1.70 contains a stored cross-site scripting vulnerability that allows authenticated users with Author-lev…
CVE-2023-49835Medium4.32024-12-09Missing Authorization vulnerability in Metaphor Creations Post Duplicator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af…
CVE-2024-32569Medium6.52024-04-18Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Metaphor Creations Ditty allows Stored XSS.This issue aff…
CVE-2023-23874Medium6.52023-05-03Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Metaphor Creations Ditty plugin <= 3.0.32 versions.