Unauthenticated SQL Injection Vulnerability in MDTF Plugin by WordPress

CVE-2026-54843

What is CVE-2026-54843?

The MDTF (Meta Data Filter and Taxonomy Filter) plugin for WordPress is susceptible to an unauthenticated SQL injection vulnerability, affecting versions up to 1.3.7. This flaw allows attackers to manipulate SQL queries by exploiting inputs that are not properly validated. If successful, an attacker could gain unauthorized access to sensitive data within the database, potentially compromising the integrity and confidentiality of the application. It's crucial for users of the MDTF plugin to apply the necessary patches and updates to mitigate these security risks.

References