metaphorcreations has 2 CVEs on record between 2025 and 2026. 1 was published in the last 90 days. The median CVSS is 7.5 (high).
CVEs per month
Last 12 months, by publish date
1225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/101126/11
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 7.5
- Publish → KEV
- —
- Last 90 days
- 1 prev 0
2
Total CVEs
0
Critical
0
CISA KEV
0
Exploited
Worst active — by depth score
CVE-2025-8085High· 8.6The Ditty WordPress plugin before 3.1.58 lacks authorization and authentication for requests to its displayItems endpoint, allowing unauthenticated visitors to make requests to arbitrary URLs.63CVE-2026-94461Medium· 6.5Contributor Cross Site Scripting (XSS) in Ditty <= 3.1.69 versions.36
metaphorcreations vulnerabilities
CVEs affecting metaphorcreations, newest first. Open any entry for full detail, references, and exploit status.
2 CVEsRSS
CVE-2026-94461Medium· 6.5Contributor Cross Site Scripting (XSS) in Ditty <= 3.1.69 versions.
Contributor Cross Site Scripting (XSS) in Ditty <= 3.1.69 versions.
▾ Sunlitmetaphorcreations · ditty-news-tickerEPSS 0.22%via NVD
CVE-2025-8085High· 8.6PoCThe Ditty WordPress plugin before 3.1.58 lacks authorization and authentication for requests to its displayItems endpoint, allowing unauthenticated visitors to make requests to arbitrary URLs.
The Ditty WordPress plugin before 3.1.58 lacks authorization and authentication for requests to its displayItems endpoint, allowing unauthenticated visitors to make requests to arbitrary URLs.
▾ Midnightmetaphorcreations · dittyEPSS 20%via NVD