Missing Authorization Vulnerability in RealMag777 MDTF Plugin

CVE-2025-62964

What is CVE-2025-62964?

The RealMag777 MDTF wp-meta-data-filter-and-taxonomy-filter plugin is susceptible to a Missing Authorization vulnerability that stems from incorrectly configured access control security levels. This flaw allows unauthorized users to gain access to restricted data and actions, potentially leading to further exploitation. The issue primarily affects MDTF versions from the initial release to 1.3.4, where proper access restrictions are not adequately enforced, presenting a significant security risk for WordPress site administrators.

References