CVE-2023-28664: Pluginus WordPress Meta Data And Taxonomies Filter

Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days.

The Meta Data and Taxonomies Filter WordPress plugin, in versions < 1.3.1, is affected by a reflected cross-site scripting vulnerability in the 'tax_name' parameter of the mdf_get_tax_options_in_widget action, which can only be triggered by an authenticated user.

Affected products

• Pluginus WordPress Meta Data And Taxonomies Filter: up to and including 1.3.1

Published 2023-03-22. Last modified 2026-06-17.