PluginUs.Net MDTF vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting PluginUs.Net MDTF: 4 record(s), with affected versions and fixes.

CVE-2026-108175 Medium · 6.5 CWE-79 Oct 15, 2026

WordPress MDTF plugin <= 1.4.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginUs.Net MDTF wp-meta-data-filter-and-taxonomy-filter allows Stored XSS.This issue affects MDTF: from n/a through 1.4.0.

CVE-2026-108151 Medium · 5.3 CWE-94 Oct 14, 2026

WordPress MDTF plugin <= 1.3.9 - Arbitrary Code Execution vulnerability

Improper Control of Generation of Code ('Code Injection') vulnerability in PluginUs.Net MDTF wp-meta-data-filter-and-taxonomy-filter allows Code Injection.This issue affects MDTF: from n/a through 1.3.9.

CVE-2026-54845 High · 8.1 CWE-98 Jun 25, 2026

WordPress MDTF plugin <= 1.3.8 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in MDTF <= 1.3.8 versions.

CVE-2026-54843 Critical · 9.3 CWE-89 Jun 25, 2026

MDTF Plugin Unauthenticated SQL Injection

Unauthenticated SQL Injection in MDTF <= 1.3.7 versions.