How many metaphorcreations Post Duplicator CVEs are in CISA KEV?

None of metaphorcreations Post Duplicator's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of metaphorcreations Post Duplicator are affected?

24 distinct metaphorcreations Post Duplicator versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in metaphorcreations Post Duplicator CVEs?

metaphorcreations Post Duplicator's CVEs most often map to these CWE weakness types: CWE-862 (Missing Authorization), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-502 (Deserialization of Untrusted Data), CWE-639 (Authorization Bypass Through User-Controlled Key).

What is the average severity of metaphorcreations Post Duplicator CVEs?

The average CVSS base score across metaphorcreations Post Duplicator's scored CVEs is 5.1.

RadicalNotion.AI

Log in Start free

metaphorcreations

9 CVEs

metaphorcreations Post Duplicator Vulnerabilities

Name: metaphorcreations Post Duplicator vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for Post Duplicator by metaphorcreations.

9

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

5.1

Avg CVSS

2022–2026

Last updated August 22, 2026

Overview

metaphorcreations Post Duplicator has 9 published CVE records since 2022, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 5.1.

This page aggregates every publicly disclosed vulnerability (CVE) affecting metaphorcreations Post Duplicator, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of metaphorcreations Post Duplicator's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High1

Medium8

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of metaphorcreations Post Duplicator's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No metaphorcreations Post Duplicator CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every metaphorcreations Post Duplicator version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

<= 3.0.112 CVEs
< 2.321 CVE
< 2.361 CVE
< 2.371 CVE
<= 2.311 CVE
<= 2.351 CVE
<= 2.361 CVE
<= 3.0.101 CVE
<= 3.0.81 CVE
>= 2.321 CVE
>= 2.361 CVE
>= 3.0.111 CVE
2.18 <= v <= 2.181 CVE
2.23 <= v <= 2.231 CVE

Fixed in

> 3.0.112 CVEs
> 2.311 CVE
> 2.351 CVE
> 2.361 CVE
> 3.0.101 CVE
> 3.0.81 CVE
2.321 CVE
2.361 CVE
2.371 CVE
3.0.111 CVE

Find a version

9 CVEs

Sort

Post Duplicator <= 3.0.11 - Missing Authorization to Authenticated (Contributor+) Post Duplication with Arbitrary Author Attribution
CVE-2026-4244
Patch
CWE-862
Medium · CVSS 4.3
EPSS 0.2% (9th pct)2026-08-22
Post Duplicator <= 3.0.11 - Authorization Bypass to Authenticated (Contributor+) Post Duplication
CVE-2026-4245
Patch
CWE-863
Medium · CVSS 4.3
EPSS 0.3% (22th pct)2026-08-22
WordPress Post Duplicator plugin <= 3.0.10 - PHP Object Injection vulnerability
CVE-2026-39474
Patch
CWE-502
High · CVSS 8.8
EPSS 0.4% (36th pct)2026-06-15
Post Duplicator <= 3.0.8 - Missing Authorization to Authenticated (Contributor+) Protected Post Meta Insertion via 'customMetaData' Parameter
CVE-2026-2301
Patch
CWE-862
Medium · CVSS 4.3
EPSS 0.2% (11th pct)2026-02-25
WordPress Post Duplicator plugin <= 2.35 - Broken Access Control vulnerability
CVE-2025-24736
Patch
CWE-862
Medium · CVSS 4.3
EPSS 0.3% (26th pct)2025-01-24
Post Duplicator <= 2.36 - Authenticated (Contributor+) Protected Post Disclosure
CVE-2024-12472
Patch
CWE-639
Medium · CVSS 4.3
EPSS 0.3% (23th pct)2025-01-11
WordPress Post Duplicator plugin <= 2.31 - Broken Access Control vulnerability
CVE-2023-49835
Patch
CWE-862
Medium · CVSS 4.3
EPSS 0.4% (34th pct)2024-12-09
meta4creations Post Duplicator Plugin notices.php mtphr_post_duplicator_notice cross site scripting
CVE-2016-15027
Patch
CWE-79
Medium · CVSS 6.1
EPSS 0.6% (48th pct)2023-02-20
Medium vulnerability · 2022-03-09
CVE-2021-33852CWE-79
Medium · CVSS 5.4
EPSS 0.6% (48th pct)2022-03-09

Common weakness types

The CWE weakness categories most often found in metaphorcreations Post Duplicator CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many metaphorcreations Post Duplicator CVEs were published each year.

2022

1

2023

1

2024

1

2025

2

2026

4

Other metaphorcreations products

Browse vulnerabilities for other products by metaphorcreations.

ditty15 CVEs Ditty – Responsive News Tickers, Sliders, and Lists2 CVEs ditty-news-ticker1 CVEs Metaphor Widgets1 CVEs

All metaphorcreations vulnerabilities

Frequently asked questions

Common questions about metaphorcreations Post Duplicator vulnerabilities.

How many CVEs does metaphorcreations Post Duplicator have?: metaphorcreations Post Duplicator has 9 published CVE records since 2022.
How many metaphorcreations Post Duplicator CVEs are in CISA KEV?: None of metaphorcreations Post Duplicator's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for metaphorcreations Post Duplicator vulnerabilities?: No metaphorcreations Post Duplicator CVEs currently have a tracked public exploit in this dataset.
Which versions of metaphorcreations Post Duplicator are affected?: 24 distinct metaphorcreations Post Duplicator versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in metaphorcreations Post Duplicator CVEs?: metaphorcreations Post Duplicator's CVEs most often map to these CWE weakness types: CWE-862 (Missing Authorization), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-502 (Deserialization of Untrusted Data), CWE-639 (Authorization Bypass Through User-Controlled Key).
What is the average severity of metaphorcreations Post Duplicator CVEs?: The average CVSS base score across metaphorcreations Post Duplicator's scored CVEs is 5.1.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track metaphorcreations Post Duplicator vulnerabilities

Monitor new metaphorcreations Post Duplicator vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing