M
Vendor security profile
metaphorcreations
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs5
Critical0
CISA KEV0
Public exploit1
Patch rate%0
Avg. CVSS5.8
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
3
1
0
CVE KEV
CVE severity distribution
5toplam CVE
High1 (20%)
Medium4 (80%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%20
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
5Unknown
Latest vulnerabilities
6.5
CVE-2026-94461
WordPress Ditty plugin <= 3.1.69 - Cross Site Scripting (XSS) vulnerability
M
Patch status unknownEPSS %0
5.3
CVE-2026-81274
WordPress Ditty plugin <= 3.1.67 - Broken Access Control vulnerability
M
Patch status unknownEPSS %0
4.3
CVE-2026-4244
Post Duplicator <= 3.0.11 - Missing Authorization to Authenticated (Contributor+) Post Duplication with Arbitrary Author Attribution
M
Patch status unknownEPSS %0
4.3
CVE-2026-4245
Post Duplicator <= 3.0.11 - Authorization Bypass to Authenticated (Contributor+) Post Duplication
M
Patch status unknownEPSS %0
8.6
CVE-2025-8085
Server-side request forgery in Metaphorcreations Ditty
M
Patch status unknownEPSS %20