MDTF – Meta Data and Taxonomies Filter

Vulnerabilities 21Slug wp-meta-data-filter-and-taxonomy-filterLatest version 1.3.7WordPress.org →

Minimum safe version

1.3.6

Update to 1.3.6 or later to address 20 fixable vulnerabilities

Latest available1.3.7 ✓⚠ 1 vulnerability has no fix
Medium 6.5
2025-10-22< 1.3.3.9

CVE-2025-62069

CVEWordfence
Medium 4.3
2025-10-24< 1.3.4

MDTF <= 1.3.3.9 - Missing Authorization

WordfenceCVEEUVD
Critical 9.3
2025-08-18< 1.3.3.8

MDTF <= 1.3.3.7 - Unauthenticated SQL Injection

WordfenceCVEEUVD
Medium 6.4
2025-01-23< 1.3.3.7

CVE-2024-13340

CVEWordfence
Medium 5.4
2023-04-12< 1.3.1

WordPress WordPress Meta Data and Taxonomies Filter (MDTF) Plugin < 1.3.1 is vulnerable to Cross Site Scripting (XSS)

PatchstackCVEWordfenceWPScan
N/A
2023-01-04< 1.3.1

WordPress WordPress Meta Data and Taxonomies Filter (MDTF) Plugin <= 1.3.0.1 is vulnerable to Cross Site Scripting (XSS)

Patchstack
N/A
2023-01-04< 1.3.1

MDTF – Meta Data and Taxonomies Filter <= 1.3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Wordfence