WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-meta-data-filter-and-taxonomy-filter
Published
2024-10-24
Title
WordPress Meta Data and Taxonomies Filter (MDTF) < 1.3.3.5 - Unauthenticated Arbitrary Shortcode Execution
Slug
wp-meta-data-filter-and-taxonomy-filter
Published
2024-10-24
Title
WordPress Meta Data and Taxonomies Filter (MDTF) < 1.3.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-meta-data-filter-and-taxonomy-filter
Published
2025-01-07
Title
MDTF – Meta Data and Taxonomies Filter < 1.3.3.6 - Authenticated (Contributor+) SQL Injection
Slug
wp-meta-data-filter-and-taxonomy-filter
Published
2025-01-22
Title
MDTF – Meta Data and Taxonomies Filter < 1.3.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-meta-data-filter-and-taxonomy-filter
Published
2025-08-18
Title
MDTF < 1.3.3.8 - Unauthenticated SQL Injection
Slug
wp-meta-data-filter-and-taxonomy-filter
Published
2025-10-16
Title
MDTF < 1.3.3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-meta-data-filter-and-taxonomy-filter
Published
2025-10-16
Title
MDTF <= 1.3.5 - Missing Authorization
Slug
wp-meta-data-filter-and-taxonomy-filter
Published
2025-10-24
Title
MDTF < 1.3.4 - Missing Authorization
Slug
wp-meta-data-filter-and-taxonomy-filter
Published
2026-03-10
Title
MDTF – Meta Data and Taxonomies Filter < 1.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-meta-data-filter-and-taxonomy-filter
Published
2026-06-18
Title
MDTF – Meta Data and Taxonomies Filter < 1.3.8 - Unauthenticated SQL Injection
Slug
wp-meta-data-filter-and-taxonomy-filter
Published
2026-06-18
Title
MDTF – Meta Data and Taxonomies Filter < 1.3.9 - Unauthenticated Local File Inclusion
Slug
wp-meta-keywords-meta-description
Published
2025-04-28
Title
Meta Keywords & Description <= 0.8 - Unauthenticated Local File Inclusion
Slug
wp-meta-seo
Published
2022-05-02
Title
WP Meta SEO < 4.4.7 - Admin+ Stored Cross-Site Scripting via breadcrumbs
Slug
wp-meta-seo
Published
2022-06-28
Title
WP Meta SEO < 4.4.9 - Social Settings Update via CSRF
Slug
wp-meta-seo
Published
2023-02-24
Title
WP Meta SEO < 4.5.4 - Subscriber+ SiteMap Settings Update
Slug
wp-meta-seo
Published
2023-02-24
Title
WP Meta SEO < 4.5.4 - Subscriber+ Google Analytics Settings Update
Slug
wp-meta-seo
Published
2023-02-27
Title
WP Meta SEO < 4.5.3 - Subscriber+ SQLi
Slug
wp-meta-seo
Published
2023-02-27
Title
WP Meta SEO < 4.5.3 - Subscriber+ Improper Authorization causing Arbitrary Redirect
Slug
wp-meta-seo
Published
2023-03-27
Title
WP Meta SEO < 4.5.5 - Author+ PHAR Deserialization
Slug
wp-meta-seo
Published
2024-04-16
Title
WP Meta SEO < 4.5.13 - Unauthenticated Stored Cross-Site Scripting via Referer header
Slug
wp-meta-seo
Published
2024-04-16
Title
WP Meta SEO < 4.5.13 - Unauthenticated Password Protected Content Access
Slug
wp-meta-seo
Published
2024-09-12
Title
WP Meta SEO < 4.5.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-meta-seo
Published
2024-09-12
Title
WP Meta SEO < 4.5.14 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
wp-meta-seo
Published
2026-06-23
Title
WP Meta SEO <= 4.5.18 - Authenticated (Contributor+) Server-Side Request Forgery via 'new_link' Parameter
Slug
wp-meta-seo
Published
2026-06-23
Title
WP Meta SEO <= 4.5.18 - Unauthenticated Stored Cross-Site Scripting via REQUEST_URI in 404 Logging