Read the docs

metaphorcreations

Records31All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

metaphorcreations records in CISA KEV

No metaphorcreations vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ditty 10 records HIGH Post Duplicator 5 records LOW

Records

5 records in Post Duplicator · all components

TI-2024-11572 CVE-2024-12472 · GHSA-8rmf-hhqr-454p

Post Duplicator <= 2.36 - Authenticated (Contributor+) Protected Post Disclosure

Priority LOW 26

The Post Duplicator plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.36 via the mtphr_duplicate_post() function due to insufficient restrictions on which posts can be dup…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00318 Published 2025-01-11 No fix listed CWE-639
TI-2021-13197 CVE-2021-33852 · GHSA-7883-f6f2-8g89

Cross-site scripting in WordPress Post Duplicator Plugin

Priority LOW 25

A cross-site scripting (XSS) attack can cause arbitrary code (JavaScript) to run in a user's browser and can use an application as the vehicle for the attack.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00636 Published 2022-03-09 No fix listed CWE-79
TI-2025-18453 CVE-2025-24736 · GHSA-646p-6wgh-wfh8

WordPress Post Duplicator plugin <= 2.35 - Broken Access Control vulnerability

Priority LOW 20

Missing Authorization vulnerability in metaphorcreations Post Duplicator post-duplicator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Duplicator: from n/a through <= 2.3…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00344 Published 2025-01-24 No fix listed CWE-862
TI-2023-27239 CVE-2023-49835 · GHSA-jcwf-p9v3-fvg5

WordPress Post Duplicator plugin <= 2.31 - Broken Access Control vulnerability

Priority LOW 20

Missing Authorization vulnerability in Metaphor Creations Post Duplicator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Duplicator: from n/a through 2.31.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0042 Published 2024-12-09 No fix listed CWE-862
Open these records in search →