Pluginus Meta Data And Taxonomies Filter vulnerabilities

2 vulnerabilities

Known vulnerabilities in Pluginus Meta Data And Taxonomies Filter, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.4CVE-2024-13340pluginusmeta_data_and_taxonomies_filter+2
EPSS score
0.31%
The MDTF – Meta Data and Taxonomies Filter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'mdf_results_by_ajax' shortcode in all versions up to, and including, 1.3.3.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.6.5CVE-2024-50451pluginusmeta_data_and_taxonomies_filter+2
EPSS score
0.28%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RealMag777 MDTF wp-meta-data-filter-and-taxonomy-filter.This issue affects MDTF: from n/a through <= 1.3.3.4.