Plugin icon

MDTF – Meta Data and Taxonomies Filter

wp-meta-data-filter-and-taxonomy-filter

Vulnerabilities:

21

Last Updated:

June 12, 2026

Active Installs:

1000

Published
Title
Fixed in
CVSS
Published
2026-06-18
Title
MDTF – Meta Data and Taxonomies Filter < 1.3.8 - Unauthenticated SQL Injection
Fixed in
Fixed in 1.3.8
CVSS
7.5 (high)
Published
2026-06-18
Title
MDTF – Meta Data and Taxonomies Filter < 1.3.9 - Unauthenticated Local File Inclusion
Fixed in
Fixed in 1.3.9
CVSS
8.1 (high)
Published
2026-03-10
Title
MDTF – Meta Data and Taxonomies Filter < 1.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.3.6
CVSS
5.5 (medium)
Published
2025-10-24
Title
MDTF < 1.3.4 - Missing Authorization
Fixed in
Fixed in 1.3.4
CVSS
4.3 (medium)
Published
2025-10-16
Title
MDTF < 1.3.3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.3.3.9
CVSS
6.4 (medium)
Published
2025-10-16
Title
MDTF <= 1.3.5 - Missing Authorization
Fixed in
No known fix
CVSS
5.3 (medium)
Published
2025-08-18
Title
MDTF < 1.3.3.8 - Unauthenticated SQL Injection
Fixed in
Fixed in 1.3.3.8
CVSS
7.5 (high)
Published
2025-01-22
Title
MDTF – Meta Data and Taxonomies Filter < 1.3.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.3.3.7
CVSS
6.4 (medium)
Published
2025-01-07
Title
MDTF – Meta Data and Taxonomies Filter < 1.3.3.6 - Authenticated (Contributor+) SQL Injection
Fixed in
Fixed in 1.3.3.6
CVSS
6.5 (medium)
Published
2024-10-24
Title
WordPress Meta Data and Taxonomies Filter (MDTF) < 1.3.3.5 - Unauthenticated Arbitrary Shortcode Execution
Fixed in
Fixed in 1.3.3.5
CVSS
7.3 (high)
Published
2024-10-24
Title
WordPress Meta Data and Taxonomies Filter (MDTF) < 1.3.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.3.3.5
CVSS
6.4 (medium)
Published
2024-09-23
Title
MDTF – Meta Data and Taxonomies Filter < 1.3.3.4 - Authenticated (Contributor+) SQL Injection
Fixed in
Fixed in 1.3.3.4
CVSS
9.9 (critical)
Published
2024-09-23
Title
MDTF – Meta Data and Taxonomies Filter < 1.3.3.4 - Unauthenticated Arbitrary Shortcode Execution
Fixed in
Fixed in 1.3.3.4
CVSS
7.3 (high)
Published
2024-05-03
Title
WordPress Meta Data and Taxonomies Filter (MDTF) < 1.3.3.3 - Unauthenticated Arbitrary Shortcode Execution
Fixed in
Fixed in 1.3.3.3
CVSS
9.1 (critical)
Published
2024-04-22
Title
WordPress Meta Data and Taxonomies Filter (MDTF) < 1.3.3.1 - Missing Authorization
Fixed in
Fixed in 1.3.3.1
CVSS
4.3 (medium)
Published
2024-03-28
Title
WordPress Meta Data and Taxonomies Filter (MDTF) < 1.3.3.2 - Cross-Site Request Forgery
Fixed in
Fixed in 1.3.3.2
CVSS
4.3 (medium)
Published
2024-03-25
Title
WordPress Meta Data and Taxonomies Filter (MDTF) < 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.3.3
CVSS
6.4 (medium)
Published
2024-03-25
Title
WordPress Meta Data and Taxonomies Filter (MDTF) < 1.3.3.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.3.3.1
CVSS
6.4 (medium)
Published
2024-03-25
Title
WordPress Meta Data and Taxonomies Filter (MDTF) < 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.3.3
CVSS
6.4 (medium)
Published
2023-03-22
Title
MDTF < 1.3.1 - Reflected XSS
Fixed in
Fixed in 1.3.1
CVSS
7.5 (high)
Published
2021-07-08
Title
MDTF < 1.2.8 / 2.2.8 - Arbitrary Settings Update via CSRF
Fixed in
Fixed in 1.2.8
CVSS
4.3 (medium)