Critical · published September 24, 2024
🚨 A crafty authenticated attacker can inject SQL queries through a vulnerable shortcode in the MDTF plugin for WordPress. 🔥 Think of it like a librarian who, with just a bit of influence, can rewrite the entire catalog system without anyone checking the books. That's the kind of power this flaw hands over to anyone with Contributor-level access! An attacker could potentially extract sensitive information from your database, like user data or hidden configurations, putting your entire site at massive risk. Even worse, if exploited, it can lead to a complete compromise of your WordPress installation!
Think of it like a librarian who, with just a bit of influence, can rewrite the entire catalog system without anyone checking the books. That's the kind of power this flaw hands over to anyone with Contributor-level access! This vulnerability in the Meta Data and Taxonomies Filter plugin arises from insufficient escaping of the 'meta_key' attribute in the 'mdf_select_title' shortcode, allowing authenticated users to append malicious SQL queries to existing ones.
An attacker could potentially extract sensitive information from your database, like user data or hidden configurations, putting your entire site at massive risk. Even worse, if exploited, it can lead to a complete compromise of your WordPress installation! To secure your site, update the MDTF plugin to version 1.3.3.4 or higher immediately. Additionally, review user permissions and consider limiting access for Contributor-level users until this is patched. 🛡️ You've got this! Stay vigilant and follow these steps to keep your site secure! 💪✨