CVE-2024-8623 is a code injection vulnerability in the MDTF – Meta Data and Taxonomies Filter WordPress plugin (versions up to 1.3.3.3). The flaw arises because the plugin executes user-supplied input via do_shortcode without proper validation, enabling unauthenticated attackers to run arbitrary shortcodes. This can lead to partial confidentiality, integrity, and availability impacts. The vulnerability has a CVSS 3.1 score of 7.3, indicating high severity with network attack vector and no required privileges or user interaction. No patch or official remediation has been documented in the provided data.

An unauthenticated attacker can exploit this vulnerability to execute arbitrary shortcodes within the WordPress environment running the vulnerable MDTF plugin. This may lead to limited confidentiality, integrity, and availability impacts depending on the shortcode executed. The vulnerability is exploitable remotely without authentication or user interaction. No known exploits in the wild have been reported so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider disabling or removing the MDTF plugin if it is not essential. Monitor vendor channels for updates or patches addressing this vulnerability. Avoid exposing the WordPress installation to untrusted users who could exploit shortcode execution.