Metaphorcreations Post Duplicator — known CVE vulnerabilities

Every CVE whose affected-product data names Metaphorcreations Post Duplicator, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2021-33852 — CVSS 5.4 (medium): A cross-site scripting (XSS) attack can cause arbitrary code (JavaScript) to run in a user's browser and can use an application as the…
• CVE-2023-49835 — CVSS 4.3 (medium): Missing Authorization vulnerability in Metaphor Creations Post Duplicator allows Exploiting Incorrectly Configured Access Control Security…
• CVE-2024-12472 — CVSS 4.3 (medium): The Post Duplicator plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.36 via the…
• CVE-2025-24736 — CVSS 4.3 (medium): Missing Authorization vulnerability in metaphorcreations Post Duplicator post-duplicator allows Exploiting Incorrectly Configured Access…
• CVE-2016-15027 — CVSS 3.5 (low): A vulnerability was found in meta4creations Post Duplicator Plugin 2.18 on WordPress. It has been classified as problematic. Affected is…