CVE-2024-8623: MDTF – Meta Data and Taxonomies Filter <= 1.3.3.3 - Unauthenticated Arbitrary Shortcode Execution
The The MDTF – Meta Data and Taxonomies Filter plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.3.3.3. This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-8623?
CVE-2024-8623 is considered a critical vulnerability due to its potential for arbitrary shortcode execution.
How do I fix CVE-2024-8623?
To fix CVE-2024-8623, update the MDTF – Meta Data and Taxonomies Filter plugin to version 1.3.3.4 or later.
Which software versions are affected by CVE-2024-8623?
CVE-2024-8623 affects all versions of the MDTF – Meta Data and Taxonomies Filter plugin up to and including 1.3.3.3.
What type of vulnerability is CVE-2024-8623?
CVE-2024-8623 is a vulnerability that allows for arbitrary shortcode execution due to improper value validation.
Is CVE-2024-8623 specific to any WordPress version?
CVE-2024-8623 is not specific to any WordPress version but affects the MDTF plugin regardless of the WordPress core version.