CVE-2024-34434: CWE-863 Incorrect Authorization in realmag777 WordPress Meta Data and Taxonomies Filter (MDTF)
CVE-2024-34434 is an Incorrect Authorization vulnerability in the realmag777 WordPress Meta Data and Taxonomies Filter (MDTF) plugin up to version 1. 3. 3. 2. This flaw allows unauthorized code inclusion and misuse of functionality. The vulnerability has a medium severity with a CVSS score of 6. 5. No official patch or remediation guidance has been provided by the vendor at this time. There are no known exploits in the wild currently reported.
AI Analysis
Technical Summary
The vulnerability identified as CVE-2024-34434 affects the realmag777 WordPress Meta Data and Taxonomies Filter (MDTF) plugin. It is categorized under CWE-863, indicating incorrect authorization. This weakness permits unauthorized users to include code or misuse plugin functionality, potentially leading to limited confidentiality and integrity impacts. The issue affects all versions up to 1.3.3.2. The CVSS 3.1 base score is 6.5, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and impacts on confidentiality and integrity but not availability. No official patch or vendor advisory detailing remediation is currently available.
Potential Impact
The vulnerability can lead to unauthorized code inclusion and misuse of plugin functionality, which may compromise confidentiality and integrity of affected WordPress sites. There is no indication of availability impact. No known active exploitation has been reported.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation has been published, users should monitor for updates from the plugin vendor and consider restricting access to the plugin's functionality where possible until a patch is available.
CVE-2024-34434: CWE-863 Incorrect Authorization in realmag777 WordPress Meta Data and Taxonomies Filter (MDTF)
Description
CVE-2024-34434 is an Incorrect Authorization vulnerability in the realmag777 WordPress Meta Data and Taxonomies Filter (MDTF) plugin up to version 1. 3. 3. 2. This flaw allows unauthorized code inclusion and misuse of functionality. The vulnerability has a medium severity with a CVSS score of 6. 5. No official patch or remediation guidance has been provided by the vendor at this time. There are no known exploits in the wild currently reported.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability identified as CVE-2024-34434 affects the realmag777 WordPress Meta Data and Taxonomies Filter (MDTF) plugin. It is categorized under CWE-863, indicating incorrect authorization. This weakness permits unauthorized users to include code or misuse plugin functionality, potentially leading to limited confidentiality and integrity impacts. The issue affects all versions up to 1.3.3.2. The CVSS 3.1 base score is 6.5, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and impacts on confidentiality and integrity but not availability. No official patch or vendor advisory detailing remediation is currently available.
Potential Impact
The vulnerability can lead to unauthorized code inclusion and misuse of plugin functionality, which may compromise confidentiality and integrity of affected WordPress sites. There is no indication of availability impact. No known active exploitation has been reported.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation has been published, users should monitor for updates from the plugin vendor and consider restricting access to the plugin's functionality where possible until a patch is available.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- Patchstack
- Date Reserved
- 2024-05-03T07:47:11.806Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 69f16563cbff5d86104ad5b8
Added to database: 4/29/2026, 1:56:51 AM
Last enriched: 4/29/2026, 3:09:39 AM
Last updated: 4/29/2026, 5:56:53 AM
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.