MDTF – Meta Data and Taxonomies Filter

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

Share of active installs on each version of this plugin · 61% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A small install base leaves thin data to model from.

1. ★★★★★ q3dm0

   4.7y ago

   Все бы ничего но заставить работать фильтр на странице категории таксономии так и не удалось, перелазил кучу настроек шаблона и прочего, вообщем бесполезный плагин

   Read on wp.org ↗
2. ★★★★★ srs928

   6.3y ago

   5* for the plug-in 5* for support

   Read on wp.org ↗
3. ★★★★★ markovetski

   6.8y ago

   I was very worried at first because it seemed too complex to me but the tutorials and documents on the site helped me a lot. It took me quite a while to build the search engine in the way I wanted but in the end, I was happy with the result. Definitely a very professional tool with lots of options and flexibility. Beyond that, I just want to thank the developers who are always willing to help, available and professional. I have answered almost all the questions, given solutions and felt that I was not alone 🙂

   Read on wp.org ↗
4. ★★★★★ ColorFish.gr

   7.3y ago

   This a really GREAT plugin that can transform the way users can interact with site! The plugin has many features and options, I didn’t need to use all of them in my project. Because of this, of the many possibilities of use, it is not a super simple plugin, but the author answers your questions if you you have them. Thank you!

   Read on wp.org ↗
5. ★★★★★ alex16

   7.3y ago

   A good filter, a lot of different settings. Many thanks to the developer!!!

   Read on wp.org ↗
6. ★★★★★ wiwist

   7.5y ago

   I am creating an event website in where I need tremendous amount of search options. I tried all possible event calendar plugins yet none of them was an answer for my complex search/sort need. It is a free plugin but I will pay for it to show my respect and gratitude. Plus: The author is very responsive and talented, he solved my problem with one sentence email. Good job !

   Read on wp.org ↗
7. ★★★★★ saadwaseem

   7.8y ago

   I have used this plugin to solve a challenging case where I need to implement AJAX filters for different product categories. The tricky part where MDTF plugin helped is to show different filters and sort panels for each individual product categories. I truly appreciate @realmag777 effort for contributing this plugin.

   Read on wp.org ↗
8. ★★★★★ WP Inventory

   8.0y ago

   Saved me some work that is for sure. And, has TONS of options to configure to get the look/feel you want. This plugin is well written and bug free!

   Read on wp.org ↗

22 disclosed vulnerabilities on record for this plugin, 1 still affects the current version.

1. High · 7.5 MDTF – Meta Data and Taxonomies Filter <= 1.3.7 - Unauthenticated SQL Injection ↗
   2026-06-18 CVE-2026-54843 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 1.3.7 Patched in 1.3.8
2. High · 8.1 MDTF – Meta Data and Taxonomies Filter <= 1.3.8 - Unauthenticated Local File Inclusion ↗
   2026-06-18 CVE-2026-54845 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') Affects <= 1.3.8 Patched in 1.3.9
3. Medium · 6.4 MDTF – Meta Data and Taxonomies Filter <= 1.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2026-03-10 CVE-2026-32455 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.3.5 Patched in 1.3.6
4. Medium · 4.3 MDTF <= 1.3.3.9 - Missing Authorization ↗
   2025-10-24 CVE-2025-49907 Missing Authorization Affects <= 1.3.3.9 Patched in 1.3.4
5. Medium · 6.4 MDTF <= 1.3.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2025-10-16 CVE-2025-62069 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.3.3.8 Patched in 1.3.3.9
6. Medium · 5.3 MDTF <= 1.3.6 - Missing Authorization ↗
   2025-10-16 CVE-2025-62964 Missing Authorization Affects <= 1.3.6 Patched in 1.3.7
7. High · 7.5 MDTF <= 1.3.3.7 - Unauthenticated SQL Injection ↗
   2025-08-18 CVE-2025-54707 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 1.3.3.7 Patched in 1.3.3.8
8. Medium · 6.4 MDTF – Meta Data and Taxonomies Filter <= 1.3.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2025-01-22 CVE-2024-13340 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.3.3.6 Patched in 1.3.3.7
9. Medium · 6.5 MDTF – Meta Data and Taxonomies Filter <= 1.3.3.5 - Authenticated (Contributor+) SQL Injection ↗
   2025-01-07 CVE-2024-12030 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 1.3.3.5 Patched in 1.3.3.6
10. High · 7.3 WordPress Meta Data and Taxonomies Filter (MDTF) <= 1.3.3.4 - Unauthenticated Arbitrary Shortcode Execution ↗
    2024-10-24 CVE-2024-50450 Improper Control of Generation of Code ('Code Injection') Affects <= 1.3.3.4 Patched in 1.3.3.5
11. Medium · 6.4 WordPress Meta Data and Taxonomies Filter (MDTF) <= 1.3.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2024-10-24 CVE-2024-50451 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.3.3.4 Patched in 1.3.3.5
12. Critical · 9.9 MDTF – Meta Data and Taxonomies Filter <= 1.3.3.3 - Authenticated (Contributor+) SQL Injection ↗
    2024-09-23 CVE-2024-8624 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 1.3.3.3 Patched in 1.3.3.4
13. High · 7.3 MDTF – Meta Data and Taxonomies Filter <= 1.3.3.3 - Unauthenticated Arbitrary Shortcode Execution ↗
    2024-09-23 CVE-2024-8623 Improper Control of Generation of Code ('Code Injection') Affects <= 1.3.3.3 Patched in 1.3.3.4
14. Critical · 9.1 WordPress Meta Data and Taxonomies Filter (MDTF) <= 1.3.3.2 - Unauthenticated Arbitrary Shortcode Execution ↗
    2024-05-03 CVE-2024-34434 Improper Control of Generation of Code ('Code Injection') Affects <= 1.3.3.2 Patched in 1.3.3.3
15. Medium · 4.3 WordPress Meta Data and Taxonomies Filter (MDTF) <= 1.3.3 - Missing Authorization ↗
    2024-04-22 CVE-2024-32818 Missing Authorization Affects <= 1.3.3 Patched in 1.3.3.1
16. Medium · 4.3 WordPress Meta Data and Taxonomies Filter (MDTF) <= 1.3.3.1 - Cross-Site Request Forgery ↗
    2024-03-28 CVE-2024-30457 Cross-Site Request Forgery (CSRF) Affects <= 1.3.3.1 Patched in 1.3.3.2
17. Medium · 6.4 WordPress Meta Data and Taxonomies Filter (MDTF) <= 1.3.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting ↗
    2024-03-25 CVE-2024-29763 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.3.3 Patched in 1.3.3.1
18. Medium · 6.4 WordPress Meta Data and Taxonomies Filter (MDTF) <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2024-03-25 CVE-2024-29906 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.3.2 Patched in 1.3.3
19. Medium · 6.4 WordPress Meta Data and Taxonomies Filter (MDTF) <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2024-03-25 CVE-2024-29932 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.3.2 Patched in 1.3.3
20. Medium · 6.1 MDTF – Meta Data and Taxonomies Filter <= 1.3.0.1 - Relected Cross-Site Scripting via 'tax_name' ↗
    2023-03-20 CVE-2023-28664 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.3.0.1 Patched in 1.3.1
21. Medium · 6.4 MDTF – Meta Data and Taxonomies Filter <= 1.3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode ↗
    2023-01-04 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.3.0.1 Patched in 1.3.1
22. High · 8.8 Meta Data Filter & Taxonomies Filter <= 1.2.7.2 - Cross-Site Request Forgery ↗
    2021-07-14 CVE-2021-20781 Cross-Site Request Forgery (CSRF) Affects < 2.2.8 Patched in 2.2.8

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Translated into 1 language, 1 at 90% or more · development strings

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2023-07-30 2K+ → 1K+ down after 148 days in tier
2. 2023-03-04 4K+ → 2K+ down

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• HUSKY – Products Filter for WooCommerce Professional 80K+ installs · 4.6★ · 2 shared tags A
• Google for WooCommerce 800K+ installs · 2.8★ · 1 shared tag B
• WooCommerce PayPal Payments 800K+ installs · 2.9★ · 1 shared tag B
• WooCommerce Stripe Payment Gateway 700K+ installs · 3.1★ · 1 shared tag B
• WooCommerce Tax (formerly WooCommerce Shipping & Tax) 500K+ installs · 2.2★ · 1 shared tag C
• WooCommerce Legacy REST API 400K+ installs · 2.2★ · 1 shared tag D

Embed this report card

Drop a live Pulse card for MDTF – Meta Data and Taxonomies Filter into a readme, a review or a deck. It updates itself.

MDTF – Meta Data and Taxonomies Filter: 1K+ active installs, 4.5★ (28 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/wp-meta-data-filter-and-taxonomy-filter