CVE-2026-108151
CVE-2026-108151 · WordPress MDTF plugin <= 1.3.9 - Arbitrary Code Execution vulnerability
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Improper Control of Generation of Code ('Code Injection') vulnerability in PluginUs.Net MDTF wp-meta-data-filter-and-taxonomy-filter allows Code Injection.This issue affects MDTF: from n/a through 1.3.9.
CVSS 5.3 · Medium · EPSS 0.3% · Fix available
- Published
- Updated
Affected products and versions
mdtf
- Versions
- ≥ 0, ≤ 1.3.9: Affected; ≥ 1.4.0: Not affected (custom)
Update to 1.4.0