Advisories · Technology

PluginUs.Net MDTF.

Every CVE that names PluginUs.Net MDTF among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-108175 CVE record

CVSS 6.5 Medium

WordPress MDTF plugin <= 1.4.0 - Cross Site Scripting (XSS) vulnerability
- PluginUs.Net MDTF
- Cross-site scripting (XSS)
Not analysed yet 15 Oct 2026
CVE-2026-108151 CVE record

CVSS 5.3 Medium

WordPress MDTF plugin <= 1.3.9 - Arbitrary Code Execution vulnerability
- PluginUs.Net MDTF
- Code injection
Not analysed yet 14 Oct 2026
CVE-2026-54845 CVE record

CVSS 8.1 High

WordPress MDTF plugin <= 1.3.8 - Local File Inclusion vulnerability
- PluginUs.Net MDTF
- File inclusion
Not analysed yet 25 Jun 2026
CVE-2026-54843 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

WordPress MDTF plugin <= 1.3.7 - SQL Injection vulnerability
- PluginUs.Net MDTF
- SQL injection
Not analysed yet 25 Jun 2026