CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
What the vulnerability does
Incorrect Authorization vulnerability in realmag777 WordPress Meta Data and Taxonomies Filter (MDTF) allows Code Inclusion, Functionality Misuse.This issue affects WordPress Meta Data and Taxonomies Filter (MDTF): from n/a through 1.3.3.2.
Explanation of Vulnerability in Simple Terms
The Meta Data and Taxonomies Filter plugin for WordPress contains an authorization flaw that allows unauthenticated attackers to read and modify sensitive data. The plugin fails to properly validate user permissions before exposing metadata and taxonomy information. This affects all versions up to 1.3.3.2. Site administrators should update immediately to a version newer than 1.3.3.2.
What an attacker can do
Read and modify metadata and taxonomy data without authentication.
Potential impact on your site
Unauthorized users can access and alter post metadata, taxonomies, and related site data.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
