WM
Product
Wordpress Meta Data And Taxonomies Filter
12
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 2High 4Medium 6Low 0
Watch
Add Wordpress Meta Data And Taxonomies Filter to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-8624 | 9.9 | Sep 24 | The MDTF – Meta Data and Taxonomies Filter plugin for WordPress is vulnerable to SQL Injection via the 'meta_key' attribute of the 'mdf_select_title' shortcode in all versions up… Affected: before 1.3.3.4 |
| CVE-2024-50450 | 9.8 | Oct 28 | Improper Control of Generation of Code ('Code Injection') vulnerability in RealMag777 MDTF wp-meta-data-filter-and-taxonomy-filter allows Code Injection.This issue affects MDTF:… Affected: before 1.3.3.5 |
| CVE-2024-32818 | 8.8 | Jun 9 | Missing Authorization vulnerability in realmag777 WordPress Meta Data and Taxonomies Filter (MDTF).This issue affects WordPress Meta Data and Taxonomies Filter (MDTF): from n/a… Affected: before 1.3.3.1 |
| CVE-2024-30457 | 8.8 | Mar 29 | Cross-Site Request Forgery (CSRF) vulnerability in realmag777 WordPress Meta Data and Taxonomies Filter (MDTF).This issue affects WordPress Meta Data and Taxonomies Filter (MDTF):… Affected: before 1.3.3.2 |
| CVE-2021-20781 | 8.8 | Jul 14 | Cross-site request forgery (CSRF) vulnerability in WordPress Meta Data Filter & Taxonomies Filter versions prior to v.1.2.8 and versions prior to v.2.2.8 allows remote attackers… Affected: before 1.2.8; 2.2.2 before 2.2.8 |
| CVE-2024-8623 | 7.3 | Sep 24 | The The MDTF – Meta Data and Taxonomies Filter plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.3.3.3 Affected: before 1.3.3.4 |
| CVE-2024-12030 | 6.5 | Jan 8 | MDTF – Meta Data and Taxonomies Filter <= 1.3.3.5 - Authenticated (Contributor+) SQL Injection Affected: before 1.3.3.6 |
| CVE-2024-34434 | 6.5 | May 17 | Incorrect Authorization vulnerability in realmag777 WordPress Meta Data and Taxonomies Filter (MDTF) allows Code Inclusion, Functionality Misuse.This issue affects WordPress Meta… Affected: before 1.3.3.3 |
| CVE-2024-29763 | 6.1 | Mar 27 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in realmag777 WordPress Meta Data and Taxonomies Filter (MDTF) allows Reflected… Affected: before 1.3.3.1 |
| CVE-2024-29932 | 5.4 | Mar 27 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in realmag777 WordPress Meta Data and Taxonomies Filter (MDTF) allows Stored… Affected: before 1.3.3 |
| CVE-2024-29906 | 5.4 | Mar 27 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in realmag777 WordPress Meta Data and Taxonomies Filter (MDTF) allows Stored… Affected: before 1.3.3 |
| CVE-2023-28664 | 5.4 | Mar 22 | The Meta Data and Taxonomies Filter WordPress plugin, in versions < 1.3.1, is affected by a reflected cross-site scripting vulnerability in the 'tax_name' parameter of the… Affected: through 1.3.1 |
Showing 12