Login Request a demo
Medium severity · published May 17, 2024
CVE-2024-34434
WordPress MDTF – Meta Data and Taxonomies Filter plugin <= 1.3.3.2 - Arbitrary Shortcode Execution vulnerability
6.5
CVSS
0.3%
EPSS
No
On KEV
Description
Incorrect Authorization vulnerability in realmag777 WordPress Meta Data and Taxonomies Filter (MDTF) allows Code Inclusion, Functionality Misuse.This issue affects WordPress Meta Data and Taxonomies Filter (MDTF): from n/a through 1.3.3.2.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 21% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WM
WordPress Meta Data and Taxonomies Filter (MDTF) · realmag777
through 1.3.3.2 · source: vendor
WM
Wordpress Meta Data And Taxonomies Filter · Pluginus
before 1.3.3.3 · source: NVD, CISA
Affected product
WM
WordPress Meta Data and Taxonomies Filter (MDTF)
realmag777
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-34434
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-34434
Third Party Advisory
https://patchstack.com/database/vulnerability/wp-meta-data-filter-and-taxonomy-filter/wordpress-mdtf-meta-data-and-taxonomies-filter-plugin-1-3-3-2-arbitrary-shortcode-execution-vulnerability?_s_id=cve
More from WordPress Meta Data and Taxonomies Filter (MDTF)
8.8
CVE-2024-32818
WordPress MDTF – Meta Data and Taxonomies Filter plugin <= 1.3.3 - Broken Access Control vulnerability
8.8
CVE-2024-30457
WordPress MDTF plugin <= 1.3.3.1 - Cross Site Request Forgery (CSRF) vulnerability
6.1
CVE-2024-29763
WordPress MDTF – Meta Data and Taxonomies Filter plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerability
5.4
CVE-2024-29932
WordPress WordPress Meta Data and Taxonomies Filter (MDTF) plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability
5.4
CVE-2024-29906
WordPress MDTF – Meta Data and Taxonomies Filter plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability