WordSec
WordSec

MDTF – Meta Data and Taxonomies Filter

Explore MDTF – Meta Data and Taxonomies Filter vulnerabilities across all versions. Currently tracking 22 known vulnerabilities, including severity, impact, and patch status.

01234567891014.07.2021Today14.07.20218.8Meta Data Filter & Taxonomies Filter <= 1.2.7.2 - Cross-Site Request Forgery CVSS 8.8 · 14.07.202104.01.20236.4MDTF – Meta Data and Taxonomies Filter <= 1.3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVSS 6.4 · 04.01.202320.03.20236.1MDTF – Meta Data and Taxonomies Filter <= 1.3.0.1 - Relected Cross-Site Scripting via 'tax_name' CVSS 6.1 · 20.03.202325.03.20246.4WordPress Meta Data and Taxonomies Filter (MDTF) <= 1.3.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting CVSS 6.4 · 25.03.20246.4WordPress Meta Data and Taxonomies Filter (MDTF) <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting CVSS 6.4 · 25.03.20246.4WordPress Meta Data and Taxonomies Filter (MDTF) <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting CVSS 6.4 · 25.03.202428.03.20244.3WordPress Meta Data and Taxonomies Filter (MDTF) <= 1.3.3.1 - Cross-Site Request Forgery CVSS 4.3 · 28.03.202422.04.20244.3WordPress Meta Data and Taxonomies Filter (MDTF) <= 1.3.3 - Missing Authorization CVSS 4.3 · 22.04.202403.05.20249.1WordPress Meta Data and Taxonomies Filter (MDTF) <= 1.3.3.2 - Unauthenticated Arbitrary Shortcode Execution CVSS 9.1 · 03.05.202423.09.20249.9MDTF – Meta Data and Taxonomies Filter <= 1.3.3.3 - Authenticated (Contributor+) SQL Injection CVSS 9.9 · 23.09.20247.3MDTF – Meta Data and Taxonomies Filter <= 1.3.3.3 - Unauthenticated Arbitrary Shortcode Execution CVSS 7.3 · 23.09.202424.10.20247.3WordPress Meta Data and Taxonomies Filter (MDTF) <= 1.3.3.4 - Unauthenticated Arbitrary Shortcode Execution CVSS 7.3 · 24.10.20246.4WordPress Meta Data and Taxonomies Filter (MDTF) <= 1.3.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting CVSS 6.4 · 24.10.202407.01.20256.5MDTF – Meta Data and Taxonomies Filter <= 1.3.3.5 - Authenticated (Contributor+) SQL Injection CVSS 6.5 · 07.01.202522.01.20256.4MDTF – Meta Data and Taxonomies Filter <= 1.3.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting CVSS 6.4 · 22.01.202518.08.20257.5MDTF <= 1.3.3.7 - Unauthenticated SQL Injection CVSS 7.5 · 18.08.202516.10.20256.4MDTF <= 1.3.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting CVSS 6.4 · 16.10.20255.3MDTF <= 1.3.6 - Missing Authorization CVSS 5.3 · 16.10.202524.10.20254.3MDTF <= 1.3.3.9 - Missing Authorization CVSS 4.3 · 24.10.202510.03.20266.4MDTF – Meta Data and Taxonomies Filter <= 1.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting CVSS 6.4 · 10.03.202618.06.20268.1MDTF – Meta Data and Taxonomies Filter <= 1.3.8 - Unauthenticated Local File Inclusion CVSS 8.1 · 18.06.20267.5MDTF – Meta Data and Taxonomies Filter <= 1.3.7 - Unauthenticated SQL Injection CVSS 7.5 · 18.06.2026

Strategic Overview

Avg CVSSMedium
6.7/ 10
Patch Coverage100%
Open

0

Fixed

22

Get automatic notifications for all MDTF – Meta Data and Taxonomies Filter vulnerabilities before they are exploited.

Vulnerability Records

22 records
2026-06-18 00:00
MDTF – Meta Data and Taxonomies Filter <= 1.3.8 - Unauthenticated Local File Inclusion
MDTF
<= 1.3.8
CVE-2026-54845
8.1
High
Ossacip ThanhYes
2026-06-18 00:00
MDTF – Meta Data and Taxonomies Filter <= 1.3.7 - Unauthenticated SQL Injection
MDTF
<= 1.3.7
CVE-2026-54843
7.5
High
Nguyen Quang TruongYes
2026-03-10 00:00
MDTF – Meta Data and Taxonomies Filter <= 1.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
MDTF
<= 1.3.5
CVE-2026-32455
6.4
Medium
zaimYes
2025-10-24 00:00
MDTF <= 1.3.3.9 - Missing Authorization
MDTF
<= 1.3.3.9
CVE-2025-49907
4.3
Medium
Legion HunterYes
2025-10-16 00:00
MDTF <= 1.3.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
MDTF
<= 1.3.3.8
CVE-2025-62069
6.4
Medium
Muhammad Yudha - DJYes
2025-10-16 00:00
MDTF <= 1.3.6 - Missing Authorization
MDTF
<= 1.3.6
CVE-2025-62964
5.3
Medium
D01EXPLOITYes
2025-08-18 00:00
MDTF <= 1.3.3.7 - Unauthenticated SQL Injection
MDTF
<= 1.3.3.7
CVE-2025-54707
7.5
High
Que Thanh Tuan - Blue RockYes
2025-01-22 21:28
MDTF – Meta Data and Taxonomies Filter <= 1.3.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
MDTF
<= 1.3.3.6
CVE-2024-13340
6.4
Medium
theviper17yYes
2025-01-07 00:00
MDTF – Meta Data and Taxonomies Filter <= 1.3.3.5 - Authenticated (Contributor+) SQL Injection
MDTF
<= 1.3.3.5
CVE-2024-12030
6.5
Medium
Thanh Nam TranYes
2024-10-24 00:00
WordPress Meta Data and Taxonomies Filter (MDTF) <= 1.3.3.4 - Unauthenticated Arbitrary Shortcode Execution
MDTF
<= 1.3.3.4
CVE-2024-50450
7.3
High
Dimas MaulanaYes
Showing 1–10 of 22 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C