MDTF – Meta Data and Taxonomies Filter

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   MDTF – Meta Data and Taxonomies Filter

Information

Software Type Plugin
Software Slug wp-meta-data-filter-and-taxonomy-filter (view on wordpress.org)
Software Status Active
Software Author realmag777
Software Website wp-filter.com
Software Downloads 83,324
Software Active Installs 1,000
Software Record Last Updated April 25, 2024

7 Vulnerabilities

WordPress Meta Data and Taxonomies Filter (MDTF) <= 1.3.3.1 - Cross-Site Request Forgery
4.3
CVE-2024-30457
Mar 28, 2024
Researcher: Dhabaleshwar Das
WordPress Meta Data and Taxonomies Filter (MDTF) <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2024-29906
Mar 25, 2024
Researcher: LVT-tholv2k
WordPress Meta Data and Taxonomies Filter (MDTF) <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2024-29932
Mar 25, 2024
Researcher: beluga
WordPress Meta Data and Taxonomies Filter (MDTF) <= 1.3.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
6.4
CVE-2024-29763
Mar 25, 2024
Researcher: Abdi Pranata
MDTF – Meta Data and Taxonomies Filter <= 1.3.0.1 - Relected Cross-Site Scripting via 'tax_name'
6.1
CVE-2023-28664
Mar 20, 2023
Researcher: Joshua Martinelle
MDTF – Meta Data and Taxonomies Filter <= 1.3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
6.4
CVE ID Unknown
Jan 4, 2023
Researchers:
Meta Data Filter & Taxonomies Filter <= 1.2.7.2 - Cross-Site Request Forgery
8.8
CVE-2021-20781
Jul 14, 2021
Researcher: Ryoma Nishioka
Title CVE ID CVSS Researchers Date
WordPress Meta Data and Taxonomies Filter (MDTF) <= 1.3.3.1 - Cross-Site Request Forgery CVE-2024-30457 4.3 Dhabaleshwar Das March 28, 2024
WordPress Meta Data and Taxonomies Filter (MDTF) <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-29906 6.4 LVT-tholv2k March 25, 2024
WordPress Meta Data and Taxonomies Filter (MDTF) <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-29932 6.4 beluga March 25, 2024
WordPress Meta Data and Taxonomies Filter (MDTF) <= 1.3.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting CVE-2024-29763 6.4 Abdi Pranata March 25, 2024
MDTF – Meta Data and Taxonomies Filter <= 1.3.0.1 - Relected Cross-Site Scripting via 'tax_name' CVE-2023-28664 6.1 Joshua Martinelle March 20, 2023
MDTF – Meta Data and Taxonomies Filter <= 1.3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 6.4 January 4, 2023
Meta Data Filter & Taxonomies Filter <= 1.2.7.2 - Cross-Site Request Forgery CVE-2021-20781 8.8 Ryoma Nishioka July 14, 2021

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation