CVE-2021-20781: Pluginus WordPress Meta Data And Taxonomies Filter

High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days.

Cross-site request forgery (CSRF) vulnerability in WordPress Meta Data Filter & Taxonomies Filter versions prior to v.1.2.8 and versions prior to v.2.2.8 allows remote attackers to hijack the authentication of administrators via unspecified vectors.

Affected products

• Pluginus WordPress Meta Data And Taxonomies Filter: before 1.2.8 (fixed in 1.2.8); from 2.2.2, before 2.2.8 (fixed in 2.2.8)

Published 2021-07-14. Last modified 2026-06-17.