Advisories · Technology

Metaphor Creations Ditty.

Every CVE that names Metaphor Creations Ditty among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-93339 CVE record

CVSS 5.1 Medium

Ditty < 3.1.70 Stored XSS via Layout Tag Wrapper Attribute
- Metaphor Creations Ditty
- Cross-site scripting (XSS)
Not analysed yet 21 Sept 2026
CVE-2024-32569 CVE record

CVSS 6.5 Medium

WordPress Ditty plugin <= 3.1.31 - Cross Site Scripting (XSS) vulnerability
- Metaphor Creations Ditty
- Cross-site scripting (XSS)
Not analysed yet 18 Apr 2024
CVE-2023-23874 CVE record

CVSS 6.5 Medium

WordPress Ditty Plugin <= 3.0.32 is vulnerable to Cross Site Scripting (XSS)
- Metaphor Creations Ditty
- Cross-site scripting (XSS)
Not analysed yet 3 May 2023