Advisories · Technology

metaphorcreations Ditty.

Every CVE that names metaphorcreations Ditty among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-94461 CVE record

CVSS 6.5 Medium

WordPress Ditty plugin <= 3.1.69 - Cross Site Scripting (XSS) vulnerability
- metaphorcreations Ditty
- Cross-site scripting (XSS)
Not analysed yet 23 Sept 2026
CVE-2026-81274 CVE record

CVSS 5.3 Medium

WordPress Ditty plugin <= 3.1.67 - Broken Access Control vulnerability
- metaphorcreations Ditty
- Broken access control
Not analysed yet 27 Aug 2026
CVE-2026-27355 CVE record

CVSS 5.3 Medium

WordPress Ditty plugin <= 3.1.66 - Broken Access Control vulnerability
- metaphorcreations Ditty
- Broken access control
Not analysed yet 23 Jul 2026
CVE-2025-60105 CVE record

CVSS 6.5 Medium

WordPress Ditty Plugin <= 3.1.58 - Cross Site Scripting (XSS) Vulnerability
- metaphorcreations Ditty
- Cross-site scripting (XSS)
Not analysed yet 26 Sept 2025
CVE-2023-47764 CVE record

CVSS 6.5 Medium

WordPress Ditty plugin <= 3.1.24 - Broken Access Control vulnerability
- metaphorcreations Ditty
- Broken access control
Not analysed yet 9 Dec 2024