Metaphorcreations vulnerabilities
We track 2 vulnerabilities in Metaphorcreations products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 22, 2026.
2vulnerabilities
0critical
2high
0exploited
8.2average CVSS score
Latest Metaphorcreations vulnerabilities
- 7.5 High severity
Ditty – Responsive News Tickers, Sliders, and…: Missing Authorization
The Ditty – Responsive News Tickers, Sliders, and Lists plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.1.65. This is due to the plugin not properly verifying that a user is authorized to perform an action. Th
- 8.8 High severity
Ditty – Responsive News Tickers, Sliders, and…: Deserialization of Untrusted Data
The Ditty plugin for WordPress is vulnerable to PHP Object Injection in all versions up to 3.1.38 via deserialization of untrusted input when adding a new ditty. This makes it possible for authenticated attackers, with contributor-level access and above, to in