Lucene search
+L

109 matches found

Kitploit
Kitploit
•added 2026/09/27 2:51 p.m.•13 views

CVE-2024-50450

CVE-2024-50450 WordPress Meta Data and Taxonomies Filter MDTF = 1.3.3.4 - 認証なし任意ショートコード実行 説明: The MDTF – Meta Data and Taxonomies Filter プラグイン for WordPress は、バージョン 1.3.3.4 までを含むすべてのバージョンにおいて、任意のショートコード実行に対して脆弱です。これは、ソフトウェアが doshortcode...

9.8CVSS6.2AI score0.01175EPSS
SaveExploits0
NVD
NVD
•added 2026/06/25 2:16 p.m.•17 views

CVE-2026-54843

Unauthenticated SQL Injection in MDTF = 1.3.7 versions...

9.3CVSS0.004EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/06/25 1:12 p.m.•12 views

CVE-2026-54845

Unauthenticated Local File Inclusion in MDTF = 1.3.8 versions...

8.1CVSS5.8AI score0.00467EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/06/25 1:12 p.m.•48 views

CVE-2026-54845 WordPress MDTF plugin <= 1.3.8 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in MDTF = 1.3.8 versions...

8.1CVSS0.00467EPSS
SaveExploits0References1
CVE
CVE
•added 2026/06/25 1:12 p.m.•50 views

CVE-2026-54845

CVE-2026-54845 : Unauthenticated Local File Inclusion in the WordPress MDTF plugin (versions &lt;= 1.3.8). The vulnerability affects the MDTF component of the WordPress plugin, enabling unauthorized access to local files. Root cause: Local File Inclusion in MDTF &lt;= 1.3.8. Exploitation details ...

8.1CVSS5.8AI score0.00467EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/06/25 1:12 p.m.•53 views

CVE-2026-54843 WordPress MDTF plugin <= 1.3.7 - SQL Injection vulnerability

Unauthenticated SQL Injection in MDTF = 1.3.7 versions...

9.3CVSS0.004EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/06/25 1:12 p.m.•9 views

CVE-2026-54843

Unauthenticated SQL Injection in MDTF = 1.3.7 versions...

9.3CVSS5.9AI score0.004EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/25 12:00 a.m.•2 views

CVE-2026-54845: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in MDTF = 1.3.8 versions...

8.1CVSS5.7AI score0.00467EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/25 12:00 a.m.•1 views

CVE-2026-54843: Improper Neutralization of Special Elements used in an SQL Command

Unauthenticated SQL Injection in MDTF = 1.3.7 versions...

9.3CVSS5.8AI score0.004EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2026/06/18 1:51 p.m.•18 views

WordPress MDTF plugin <= 1.3.7 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Roll in WordPress Plugin MDTF versions = 1.3.7...

9.3CVSS6AI score0.004EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
•added 2026/03/26 3:17 p.m.•14 views

CVE-2026-32455

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RealMag777 MDTF wp-meta-data-filter-and-taxonomy-filter allows DOM-Based XSS.This issue affects MDTF: from n/a through = 1.3.5...

6.5CVSS5.8AI score0.00224EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/03/13 11:42 a.m.•11 views

CVE-2026-32455

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RealMag777 MDTF wp-meta-data-filter-and-taxonomy-filter allows DOM-Based XSS.This issue affects MDTF: from n/a through = 1.3.5...

5.8AI score0.00224EPSS
SaveExploits0References2
CVE
CVE
•added 2026/03/13 11:42 a.m.•41 views

CVE-2026-32455

CVE-2026-32455 describes a DOM-based XSS in the WordPress MDTF plugin wp-meta-data-filter-and-taxonomy-filter

6.5CVSS5.8AI score0.00224EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/13 12:00 a.m.•2 views

CVE-2026-32455: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RealMag777 MDTF wp-meta-data-filter-and-taxonomy-filter allows DOM-Based XSS.This issue affects MDTF: from n/a through = 1.3.5...

6.5CVSS5.8AI score0.00224EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/10/27 1:34 a.m.•10 views

CVE-2025-62964 WordPress MDTF plugin <= 1.3.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in RealMag777 MDTF wp-meta-data-filter-and-taxonomy-filter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MDTF: from n/a through = 1.3.6...

5.3CVSS5.1AI score0.00218EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/10/27 1:34 a.m.•30 views

CVE-2025-62964 WordPress MDTF plugin <= 1.3.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in RealMag777 MDTF wp-meta-data-filter-and-taxonomy-filter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MDTF: from n/a through = 1.3.6...

5.3CVSS0.00218EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/27 12:00 a.m.•2 views

CVE-2025-62964: Missing Authorization

Missing Authorization vulnerability in RealMag777 MDTF wp-meta-data-filter-and-taxonomy-filter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MDTF: from n/a through = 1.3.6...

5.3CVSS5.9AI score0.00218EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/10/27 12:00 a.m.•20 views

WordPress plugin MDTF 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

5.3CVSS6.5AI score0.00218EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/10/24 2:00 p.m.•18 views

WordPress MDTF plugin <= 1.3.3.9 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin MDTF versions = 1.3.3.9...

4.3CVSS7AI score0.00306EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
•added 2025/10/23 3:13 p.m.•14 views

CVE-2025-62069

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RealMag777 MDTF wp-meta-data-filter-and-taxonomy-filter.This issue affects MDTF: from n/a through = 1.3.3.8...

6.5CVSS6.4AI score0.00176EPSS
SaveExploits0References1
Rows per page
Query Builder