Lucene search
+L

123 matches found

Kitploit
Kitploit
•added 2026/10/25 8:54 p.m.•26 views

CVE-2024-50450

CVE-2024-50450 WordPress Meta Data and Taxonomies Filter MDTF = 1.3.3.4 - Unauthenticated Arbitrary Shortcode Execution Description: The The MDTF – Meta Data and Taxonomies Filter plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.3.3.4. Th...

9.8CVSS6.8AI score0.01175EPSS
SaveExploits0
NVD
NVD
•added 2026/10/15 6:17 p.m.•11 views

CVE-2026-108175

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PluginUs.Net MDTF wp-meta-data-filter-and-taxonomy-filter allows Stored XSS.This issue affects MDTF: from n/a through 1.4.0...

6.5CVSS0.00156EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/15 5:48 p.m.•34 views

CVE-2026-108175 WordPress MDTF plugin <= 1.4.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PluginUs.Net MDTF wp-meta-data-filter-and-taxonomy-filter allows Stored XSS.This issue affects MDTF: from n/a through 1.4.0...

6.5CVSS0.00156EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/15 5:48 p.m.•11 views

EUVD-2026-102235

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PluginUs.Net MDTF wp-meta-data-filter-and-taxonomy-filter allows Stored XSS.This issue affects MDTF: from n/a through 1.4.0...

6.5CVSS5.7AI score0.00156EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/15 5:48 p.m.•17 views

CVE-2026-108175

The PluginUs.Net MDTF wp-meta-data-filter-and-taxonomy-filter WordPress plugin is vulnerable to Stored Cross-Site Scripting (XSS) in versions up to and including 1.4.0 . The root cause is the improper neutralization of input during web page generation . This vulnerability allows an attacker to ex...

6.5CVSS5.7AI score0.00156EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/10/15 5:48 p.m.•29 views

WordPress MDTF plugin <= 1.4.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin MDTF versions = 1.4.0...

6.5CVSS5.7AI score0.00156EPSS
SaveExploits0Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/15 12:00 a.m.•6 views

CVE-2026-108175: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PluginUs.Net MDTF wp-meta-data-filter-and-taxonomy-filter allows Stored XSS.This issue affects MDTF: from n/a through 1.4.0...

6.5CVSS5.7AI score0.00156EPSS
SaveExploits0References2
NVD
NVD
•added 2026/10/14 6:17 p.m.•14 views

CVE-2026-108151

Improper Control of Generation of Code 'Code Injection' vulnerability in PluginUs.Net MDTF wp-meta-data-filter-and-taxonomy-filter allows Code Injection.This issue affects MDTF: from n/a through 1.3.9...

5.3CVSS0.00244EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/14 6:09 p.m.•22 views

CVE-2026-108151

The PluginUs.Net MDTF wp-meta-data-filter-and-taxonomy-filter WordPress plugin is vulnerable to Code Injection (CWE-94). This flaw allows for Arbitrary Code Execution and affects versions from n/a through 1.3.9 . No specific root cause or remediation details are provided in the documents. No expl...

5.3CVSS5.8AI score0.00244EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/14 6:09 p.m.•12 views

EUVD-2026-101524

Improper Control of Generation of Code 'Code Injection' vulnerability in PluginUs.Net MDTF wp-meta-data-filter-and-taxonomy-filter allows Code Injection.This issue affects MDTF: from n/a through 1.3.9...

5.3CVSS5.8AI score0.00244EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/14 6:09 p.m.•35 views

CVE-2026-108151 WordPress MDTF plugin <= 1.3.9 - Arbitrary Code Execution vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in PluginUs.Net MDTF wp-meta-data-filter-and-taxonomy-filter allows Code Injection.This issue affects MDTF: from n/a through 1.3.9...

5.3CVSS0.00244EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/14 12:00 a.m.•5 views

CVE-2026-108151: Improper Control of Generation of Code

Improper Control of Generation of Code 'Code Injection' vulnerability in PluginUs.Net MDTF wp-meta-data-filter-and-taxonomy-filter allows Code Injection.This issue affects MDTF: from n/a through 1.3.9...

5.3CVSS5.8AI score0.00244EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2026/10/12 5:39 p.m.•9 views

WordPress MDTF plugin <= 1.3.9 - Arbitrary Code Execution vulnerability

Arbitrary Code Execution vulnerability discovered by Peter Tang in WordPress Plugin MDTF versions = 1.3.9...

5.3CVSS5.8AI score0.00244EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2026/06/25 2:16 p.m.•19 views

CVE-2026-54843

Unauthenticated SQL Injection in MDTF = 1.3.7 versions...

9.3CVSS0.004EPSS
SaveExploits0References1
CVE
CVE
•added 2026/06/25 1:12 p.m.•57 views

CVE-2026-54845

CVE-2026-54845 : Unauthenticated Local File Inclusion in the WordPress MDTF plugin (versions &lt;= 1.3.8). The vulnerability affects the MDTF component of the WordPress plugin, enabling unauthorized access to local files. Root cause: Local File Inclusion in MDTF &lt;= 1.3.8. Exploitation details ...

8.1CVSS5.8AI score0.00467EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/06/25 1:12 p.m.•54 views

CVE-2026-54845 WordPress MDTF plugin <= 1.3.8 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in MDTF = 1.3.8 versions...

8.1CVSS0.00467EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/06/25 1:12 p.m.•16 views

CVE-2026-54845

Unauthenticated Local File Inclusion in MDTF = 1.3.8 versions...

8.1CVSS5.8AI score0.00467EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/06/25 1:12 p.m.•12 views

CVE-2026-54843

Unauthenticated SQL Injection in MDTF = 1.3.7 versions...

9.3CVSS5.8AI score0.004EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/06/25 1:12 p.m.•56 views

CVE-2026-54843 WordPress MDTF plugin <= 1.3.7 - SQL Injection vulnerability

Unauthenticated SQL Injection in MDTF = 1.3.7 versions...

9.3CVSS0.004EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/25 12:00 a.m.•4 views

CVE-2026-54843: Improper Neutralization of Special Elements used in an SQL Command

Unauthenticated SQL Injection in MDTF = 1.3.7 versions...

9.3CVSS5.8AI score0.004EPSS
SaveExploits0References2
Rows per page
Query Builder