The vulnerability identified as CVE-2024-29763 affects the realmag777 WordPress Meta Data and Taxonomies Filter (MDTF) plugin through improper input sanitization leading to reflected Cross-site Scripting (CWE-79). This allows attackers to inject malicious scripts that are reflected back to users, potentially compromising confidentiality, integrity, and availability. The issue impacts all versions up to 1.3.3. The CVSS 3.1 vector indicates the attack requires network access, no privileges, user interaction, and results in partial confidentiality, integrity, and availability impact. No patch or official fix has been published yet.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary scripts in the context of users visiting affected WordPress sites using the MDTF plugin. This may lead to theft of user credentials, session hijacking, or other malicious actions impacting confidentiality, integrity, and availability. The reflected nature means the attack requires user interaction, such as clicking a crafted link.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling the MDTF plugin or applying temporary mitigations such as input validation or web application firewall (WAF) rules to block malicious payloads. Monitor vendor channels for updates and apply patches promptly once available.