https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-12030.htmlhttps://patchthecve.com/cve/CVE-2024-12030.htmlWed, 17 Jun 2026 06:58:55 +0000MEDIUM 6.5: The MDTF – Meta Data and Taxonomies Filter plugin for WordPress is vulnerable to SQL Injection via the 'key' attribute of the 'mdf_value' shortcode in all versions up to, and including, 1.3.3.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the exishttps://patchthecve.com/cve/CVE-2024-50450.htmlhttps://patchthecve.com/cve/CVE-2024-50450.htmlWed, 17 Jun 2026 08:04:30 +0000HIGH 7.3: Improper Control of Generation of Code ('Code Injection') vulnerability in RealMag777 MDTF wp-meta-data-filter-and-taxonomy-filter allows Code Injection.This issue affects MDTF: from n/a through <= 1.3.3.4.https://patchthecve.com/cve/CVE-2024-8624.htmlhttps://patchthecve.com/cve/CVE-2024-8624.htmlWed, 17 Jun 2026 08:23:00 +0000CRITICAL 9.9: The MDTF – Meta Data and Taxonomies Filter plugin for WordPress is vulnerable to SQL Injection via the 'meta_key' attribute of the 'mdf_select_title' shortcode in all versions up to, and including, 1.3.3.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparationhttps://patchthecve.com/cve/CVE-2024-8623.htmlhttps://patchthecve.com/cve/CVE-2024-8623.htmlWed, 17 Jun 2026 08:23:00 +0000HIGH 7.3: The The MDTF – Meta Data and Taxonomies Filter plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.3.3.3. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This