MDTF – Meta Data and Taxonomies Filter

MDTF – Meta Data and Taxonomies Filter has 22 disclosed vulnerabilities in the WordSec catalog, reported between 2021 and 2026; all 22 are fixed as of September 2026. Their average CVSS score is 6.7, and the most serious one scores 9.9 out of 10. Severity breakdown: 2 critical and 6 high. 2024 was the busiest year with 10 disclosures.

The most common weakness is Cross-Site Scripting, behind 9 of the records (41%). Other recurring categories include SQL Injection, Code Injection.

Every one of the 22 issues recorded for MDTF – Meta Data and Taxonomies Filter has a vendor fix available, so running the current release closes all known holes.

19 independent researchers contributed these findings, most of them (2) reported by Abdi Pranata. MDTF – Meta Data and Taxonomies Filter is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

01234567891022.04.2014Today14.07.20218.8Meta Data Filter & Taxonomies Filter <= 1.2.7.2 - Cross-Site Request Forgery CVSS 8.8 · 14.07.202104.01.20236.4MDTF – Meta Data and Taxonomies Filter <= 1.3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVSS 6.4 · 04.01.202320.03.20236.1MDTF – Meta Data and Taxonomies Filter <= 1.3.0.1 - Relected Cross-Site Scripting via 'tax_name' CVSS 6.1 · 20.03.202325.03.20246.4WordPress Meta Data and Taxonomies Filter (MDTF) <= 1.3.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting CVSS 6.4 · 25.03.20246.4WordPress Meta Data and Taxonomies Filter (MDTF) <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting CVSS 6.4 · 25.03.20246.4WordPress Meta Data and Taxonomies Filter (MDTF) <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting CVSS 6.4 · 25.03.202428.03.20244.3WordPress Meta Data and Taxonomies Filter (MDTF) <= 1.3.3.1 - Cross-Site Request Forgery CVSS 4.3 · 28.03.202422.04.20244.3WordPress Meta Data and Taxonomies Filter (MDTF) <= 1.3.3 - Missing Authorization CVSS 4.3 · 22.04.202403.05.20249.1WordPress Meta Data and Taxonomies Filter (MDTF) <= 1.3.3.2 - Unauthenticated Arbitrary Shortcode Execution CVSS 9.1 · 03.05.202423.09.20249.9MDTF – Meta Data and Taxonomies Filter <= 1.3.3.3 - Authenticated (Contributor+) SQL Injection CVSS 9.9 · 23.09.20247.3MDTF – Meta Data and Taxonomies Filter <= 1.3.3.3 - Unauthenticated Arbitrary Shortcode Execution CVSS 7.3 · 23.09.202424.10.20247.3WordPress Meta Data and Taxonomies Filter (MDTF) <= 1.3.3.4 - Unauthenticated Arbitrary Shortcode Execution CVSS 7.3 · 24.10.20246.4WordPress Meta Data and Taxonomies Filter (MDTF) <= 1.3.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting CVSS 6.4 · 24.10.202407.01.20256.5MDTF – Meta Data and Taxonomies Filter <= 1.3.3.5 - Authenticated (Contributor+) SQL Injection CVSS 6.5 · 07.01.202522.01.20256.4MDTF – Meta Data and Taxonomies Filter <= 1.3.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting CVSS 6.4 · 22.01.202518.08.20257.5MDTF <= 1.3.3.7 - Unauthenticated SQL Injection CVSS 7.5 · 18.08.202516.10.20256.4MDTF <= 1.3.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting CVSS 6.4 · 16.10.20255.3MDTF <= 1.3.6 - Missing Authorization CVSS 5.3 · 16.10.202524.10.20254.3MDTF <= 1.3.3.9 - Missing Authorization CVSS 4.3 · 24.10.202510.03.20266.4MDTF – Meta Data and Taxonomies Filter <= 1.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting CVSS 6.4 · 10.03.202618.06.20268.1MDTF – Meta Data and Taxonomies Filter <= 1.3.8 - Unauthenticated Local File Inclusion CVSS 8.1 · 18.06.20267.5MDTF – Meta Data and Taxonomies Filter <= 1.3.7 - Unauthenticated SQL Injection CVSS 7.5 · 18.06.2026

Strategic Overview

Avg CVSSMedium
6.7/ 10
Patch Coverage100%
Open

0

Fixed

22

Get automatic notifications for all MDTF – Meta Data and Taxonomies Filter vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.9CVE-2024-8624

MDTF – Meta Data and Taxonomies Filter <= 1.3.3.3 - Authenticated (Contributor+) SQL Injection

Read the full analysis

Vulnerability Records

22 records
2026-06-18 00:00CVE-2026-54845
8.1
High
Ossacip ThanhYes
2026-06-18 00:00CVE-2026-54843
7.5
High
Nguyen Quang TruongYes
2026-03-10 00:00CVE-2026-32455
6.4
Medium
zaimYes
2025-10-24 00:00CVE-2025-49907
4.3
Medium
Legion HunterYes
2025-10-16 00:00CVE-2025-62069
6.4
Medium
Muhammad Yudha - DJYes
2025-10-16 00:00CVE-2025-62964
5.3
Medium
D01EXPLOITYes
2025-08-18 00:00CVE-2025-54707
7.5
High
Que Thanh Tuan - Blue RockYes
2025-01-22 21:28CVE-2024-13340
6.4
Medium
theviper17yYes
2025-01-07 00:00CVE-2024-12030
6.5
Medium
Thanh Nam TranYes
2024-10-24 00:00CVE-2024-50450
7.3
High
Dimas MaulanaYes
Showing 1–10 of 22 reports
MDTF – Meta Data and Taxonomies Filter banner
Latestv1.3.9

MDTF – Meta Data and Taxonomies Filter

RealMag777

Author

RealMag777

4.5(28)
90/100
Last Updated
2026-06-12 (3mo ago)
Active Installs
1,000+
Downloads
98,039
Requires WP
4.1.0+
Requires PHP
7.4+
Tested up to
WP 7.0.4
Created
2014-04-22 (13y ago)

Meta Data Filter & Taxonomies Filter (MDTF) wordpress filter plugin. The main idea of MDTF – make your WordPress site content is filterable and searchable by meta fields and taxonomies on the same time. MDTF is for filtering and searching WordPress content – posts and custom post types by taxonomies and meta data fields on the same time. MDTF is ready to work as WooCommerce products filter. The plugin has very high flexibility thanks to its rich set of filter elements! With MDTF your site customers will be able to filter posts/pages/custom types by the the meta fields and/or taxonomies on the same time. 📚 DOCUMENTATION: https://wp-filter.com/documentation/ 🌐 DEMO SITES: https://wp-filter.com/demo-sites/ 🐘 PHP 8.x – FULL COMPATIBILITY! Meta Data and Taxonomies Filter Features: 🔍 AJAX searching and filtering for: posts, custom post types, woocommerce products, jigoshop products, Easy Digital Downloads products 🔧 Widgets and Shortcodes 📊 STATISTICS – analyze the information about what your customers filtering on your site 📩 Post Messenger – let your customers will know about new posts or products according to their selected search criterias 🔎 Filter posts and custom post types by meta fields 🌐 Filter posts and custom post types by taxonomies 🔄 Query multiple taxonomies and meta fields on the same time 📍 INSERT SEARCH/FILTER FORMS BY SHORTCODES IN ANY PLACE OF YOUR SITE 🛠️ Creating SEARCH/FILTER shortcodes by constructor 🧩 Meta values html-items combinations auto recount based on the current search (dynamic recount) 🔢 Taxonomies terms values dynamic recount based on the current search 🛠️ Built-in the meta-fields data constructor (checkbox, drop-down, multi drop-down, range-slider, calendar, textinput, label) 🔄 AJAX recounting of the SEARCH/FILTER form html-items for hierarchical searching 🔢 Unlimited count of meta fields which can be created by built-in meta data constructor 🔁 Auto submit option 📏 Step for range slider optionally. Integer or Decimal. 📐 Size for any drop-down optionally 🔤 Filtering by post title and its content (any post type) 🛠️ Specify for each meta fields the display mode on tye site front: drop-down, checkbox, range slider, calendar, textinput, label 🔲 Specify for each taxonomy the display mode on the site front: drop-down, checkbox, multi drop-down, label 🔧 Constructor of sort-panels 🛒 Work with WooCommerce: price, products attributes and with product categories! 🏷️ Ready for Jigoshop! and EasyDigitalDownloads 💬 Nice tooltip for each filter html-element in the filter form with description text 🔢 Unlimited instances of the MDTF widgets and MDTF shortcodes, and each of them has its own set of settings 🚫 Empty terms or meta fields can be hidden optionally in widgets and in shortcodes (premium) 🔄 Works with any kind of posts, custom post types, woocommerce/jigoshop products, category or custom taxonomies, price 🔄 Dynamic recount for the search combinations 🔄 Reset button optionally 📚 Toggles for the filter sections 🔧 Wide API 💎 Get Premium version of WordPress Filter plugin on CODECANYON Videos: Easy entry Creating complex cars dealer site Quick start with WooCommerce WATCH MORE VIDEOS Additional information: NOT INCLUDED IN THE FREE VERSION OF THE PLUGIN: https://wp-filter.com/difference-free-premium-versions-plugin/ CODEX: https://wp-filter.com/codex/ Important note: If you have troubles with empty result page, and you sure that it must be, do next please: * open your wp theme file header.php * at the same bottom of the file drop this <?php do_shortcode(&#8216;[mdf_force_searching]’) ?> * save file Make your site more profitable with next powerful scripts: &#9989; HUSKY – WooCommerce Products Filter: is an extendable, flexible and robust plugin for WooCommerce that allows your site customers filter products by products categories, attributes, tags, custom taxonomies and price. Supports latest version of the WooCommerce plugin. A must have plugin for your WooCommerce powered online store! Maximum flexibility! &#9989; BEAR – WooCommerce Bulk Editor Professional: BEAR – WordPress plugin for managing and bulk edit WooCommerce Products data in robust and flexible way! Be professionals with managing data of your woocommerce e-shop! &#9989; FOX – WooCommerce Currency Switcher: is WooCommerce multi currency plugin, that allows your site visitors switch products prices currencies according to set currencies rates in the real time and pay in the selected currency (optionally). Allows to add any currency for WooCommerce store! &#9989; WOOT – WooCommerce Products Table: Products tables makes focus for your buyers on the things they want to get, nothing superfluous, just what the client wants, and full attention to what is offered! Convenience of choice in your shop products for your customers, means benefits for your business. WOOT – focused and constructive way to sell online! &#9989; TABLEON – WordPress Post Tables Filterable: WordPress plugin for displaying site posts and their custom post types in table format. Tables makes focus for your customers on the things they want to get, nothing superfluous, just what the client wants, and full attention to what is offered! &#9989; WPCS – WordPress Currency Switcher: is a WordPress plugin that allows to switch currencies and get their rates converted in the real time on your site! &#9989; WOLF – WordPress Posts Bulk Editor Professional: is WordPress plugin for managing and bulk edit WordPress posts, pages and custom post types data in robust and flexible way! Be professionals with managing data of your site! License This plugin is copyright pluginus.net &copy; 2012-2026 with GNU General Public License by realmag777. This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY. See the GNU General Public License for more details.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C