MDTF – Meta Data and Taxonomies Filter

Information

Software Type	Plugin
Software Slug	wp-meta-data-filter-and-taxonomy-filter (view on wordpress.org)
Software Status	Active
Software Author	realmag777
Software Website	wp-filter.com
Software Downloads	83,719
Software Active Installs	1,000
Software Record Last Updated	May 18, 2024

9 Vulnerabilities

Meta Data Filter & Taxonomies Filter <= 1.2.7.2 - Cross-Site Request Forgery

8.8

CVE-2021-20781

Jul 14, 2021

Researcher: Ryoma Nishioka

MDTF – Meta Data and Taxonomies Filter <= 1.3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

6.4

CVE ID Unknown

Jan 4, 2023

Researchers:

MDTF – Meta Data and Taxonomies Filter <= 1.3.0.1 - Relected Cross-Site Scripting via 'tax_name'

6.1

CVE-2023-28664

Mar 20, 2023

Researcher: Joshua Martinelle

WordPress Meta Data and Taxonomies Filter (MDTF) <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

6.4

CVE-2024-29906

Mar 25, 2024

Researcher: LVT-tholv2k

WordPress Meta Data and Taxonomies Filter (MDTF) <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

6.4

CVE-2024-29932

Mar 25, 2024

Researcher: beluga

WordPress Meta Data and Taxonomies Filter (MDTF) <= 1.3.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting

6.4

CVE-2024-29763

Mar 25, 2024

Researcher: Abdi Pranata

WordPress Meta Data and Taxonomies Filter (MDTF) <= 1.3.3.1 - Cross-Site Request Forgery

4.3

CVE-2024-30457

Mar 28, 2024

Researcher: Dhabaleshwar Das

WordPress Meta Data and Taxonomies Filter (MDTF) <= 1.3.3 - Missing Authorization

4.3

CVE-2024-32818

Apr 22, 2024

Researcher: Abdi Pranata

WordPress Meta Data and Taxonomies Filter (MDTF) <= 1.3.3.2 - Unauthenticated Arbitrary Shortcode Execution

9.1

CVE-2024-34434

May 3, 2024

Researcher: stealthcopter

Title	Status	CVE ID	CVSS	Researchers	Date
Meta Data Filter & Taxonomies Filter <= 1.2.7.2 - Cross-Site Request Forgery	Patched	CVE-2021-20781	8.8	Ryoma Nishioka	July 14, 2021
MDTF – Meta Data and Taxonomies Filter <= 1.3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode	Patched		6.4		January 4, 2023
MDTF – Meta Data and Taxonomies Filter <= 1.3.0.1 - Relected Cross-Site Scripting via 'tax_name'	Patched	CVE-2023-28664	6.1	Joshua Martinelle	March 20, 2023
WordPress Meta Data and Taxonomies Filter (MDTF) <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting	Patched	CVE-2024-29906	6.4	LVT-tholv2k	March 25, 2024
WordPress Meta Data and Taxonomies Filter (MDTF) <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting	Patched	CVE-2024-29932	6.4	beluga	March 25, 2024
WordPress Meta Data and Taxonomies Filter (MDTF) <= 1.3.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting	Patched	CVE-2024-29763	6.4	Abdi Pranata	March 25, 2024
WordPress Meta Data and Taxonomies Filter (MDTF) <= 1.3.3.1 - Cross-Site Request Forgery	Patched	CVE-2024-30457	4.3	Dhabaleshwar Das	March 28, 2024
WordPress Meta Data and Taxonomies Filter (MDTF) <= 1.3.3 - Missing Authorization	Patched	CVE-2024-32818	4.3	Abdi Pranata	April 22, 2024
WordPress Meta Data and Taxonomies Filter (MDTF) <= 1.3.3.2 - Unauthenticated Arbitrary Shortcode Execution	Patched	CVE-2024-34434	9.1	stealthcopter	May 3, 2024

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation