The RealMag777 MDTF plugin for WordPress versions up to 1.3.3.4 contains a code injection vulnerability due to improper control over code generation. This flaw allows an unauthenticated attacker to inject and execute arbitrary code remotely, impacting the confidentiality, integrity, and availability of the affected system. The vulnerability is tracked as CVE-2024-50450 with a CVSS 3.1 base score of 7.3 (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L). No patch or official fix information is currently available, and no exploits have been observed in the wild.

Successful exploitation of this vulnerability could allow remote attackers to execute arbitrary code on affected installations of the RealMag777 MDTF plugin, potentially leading to partial compromise of the system's confidentiality, integrity, and availability. The vulnerability requires no privileges or user interaction, increasing its risk profile. However, there are no known active exploits reported at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling or removing the affected plugin version to mitigate risk. Monitoring for updates from RealMag777 or trusted security sources is recommended.