CVE-2024-50450

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-50450
Improper Control of Generation of Code ('Code Injection') vulnerability in realmag777 WordPress Meta Data and Taxonomies Filter (MDTF) allows Code Injection.This issue affects WordPress Meta Data and Taxonomies Filter (MDTF): from n/a through 1.3.3.4.

9.8 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://patchstack.com/database/vulnerability/wp-meta-data-filter-and-taxonomy-filter/wordpress-mdtf-meta-data-and-taxonomies-filter-plugin-1-3-3-4-bypass-vulnerability-vulnerability?_s_id=cve Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:pluginus:wordpress_meta_data_and_taxonomies_filter:*:*:*:*:*:wordpress:*:*
History

29 Oct 2024, 16:05

Type Values Removed Values Added
Summary
  • (es) La vulnerabilidad de control inadecuado de generación de código ('inyección de código') en realmag777 WordPress Meta Data and Taxonomies Filter (MDTF) permite la inyección de código. Este problema afecta a WordPress Meta Data and Taxonomies Filter (MDTF): desde n/a hasta 1.3.3.4.
First Time Pluginus
Pluginus wordpress Meta Data And Taxonomies Filter
CPE cpe:2.3:a:pluginus:wordpress_meta_data_and_taxonomies_filter:*:*:*:*:*:wordpress:*:*
References () https://patchstack.com/database/vulnerability/wp-meta-data-filter-and-taxonomy-filter/wordpress-mdtf-meta-data-and-taxonomies-filter-plugin-1-3-3-4-bypass-vulnerability-vulnerability?_s_id=cve - () https://patchstack.com/database/vulnerability/wp-meta-data-filter-and-taxonomy-filter/wordpress-mdtf-meta-data-and-taxonomies-filter-plugin-1-3-3-4-bypass-vulnerability-vulnerability?_s_id=cve - Third Party Advisory
CVSS v2 : unknown
v3 : 7.3 		v2 : unknown
v3 : 9.8

28 Oct 2024, 12:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-10-28 12:15

Updated : 2024-10-29 16:05

NVD link : CVE-2024-50450

Mitre link : CVE-2024-50450

CVE.ORG link : CVE-2024-50450

JSON object : View

Products Affected

pluginus

  • wordpress_meta_data_and_taxonomies_filter
CWE
CWE-94

Improper Control of Generation of Code ('Code Injection')