MDTF – Meta Data and Taxonomies Filter

74 Quality Score

Active Installs

14/30

With only 1,000 active installs it sits well below every alternative listed, and the popularity score above 100 indicates it punches above its size rather than being broadly adopted.

Update Freshness

25/25

Updated within the last day relative to the data snapshot and tested against WordPress 7.0, it scores a perfect 100 for maintenance currency.

User Rating

14/15

A 90 out of 100 from 28 raters is excellent, though the small sample size means the average could shift quickly.

Support Health

8/15

Zero threads opened and zero resolved gives a support score of 50, meaning there is no public track record to fall back on if something breaks.

WP Compatibility

15/15

Modern PHP 7.4 minimum, WordPress 4.1 compatibility floor, and tested on 7.0 earns a full 100 for technical compatibility.

Scores higher than 36% of indexed plugins

About

The main idea of the plugin – make your WordPress site content is filterable and searchable by meta fields and taxonomies on the same time.

Active Installs 1k+

Rating ★★★★½ 4.5/5

Last Updated 2026-06-12 12:04pm GMT

Requires WordPress 4.1.0+

Tested Up To 7.0.4

Requires PHP 7.4+

Security History

22 known vulnerabilities, all patched

2 Critical 6 High 14 Medium

Most recent: June 18, 2026

View details ▸

MDTF – Meta Data and Taxonomies Filter <= 1.3.7 - Unauthenticated SQL Injection High

June 18, 2026 Patched in ["1.3.8"] CVE-2026-54843

MDTF – Meta Data and Taxonomies Filter <= 1.3.8 - Unauthenticated Local File Inclusion High

June 18, 2026 Patched in ["1.3.9"] CVE-2026-54845

MDTF – Meta Data and Taxonomies Filter <= 1.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

March 10, 2026 Patched in ["1.3.6"] CVE-2026-32455

MDTF <= 1.3.3.9 - Missing Authorization Medium

October 24, 2025 Patched in ["1.3.4"] CVE-2025-49907

MDTF <= 1.3.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

October 16, 2025 Patched in ["1.3.3.9"] CVE-2025-62069

MDTF <= 1.3.6 - Missing Authorization Medium

October 16, 2025 Patched in ["1.3.7"] CVE-2025-62964

MDTF <= 1.3.3.7 - Unauthenticated SQL Injection High

August 18, 2025 Patched in ["1.3.3.8"] CVE-2025-54707

MDTF – Meta Data and Taxonomies Filter <= 1.3.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

January 22, 2025 Patched in ["1.3.3.7"] CVE-2024-13340

MDTF – Meta Data and Taxonomies Filter <= 1.3.3.5 - Authenticated (Contributor+) SQL Injection Medium

January 7, 2025 Patched in ["1.3.3.6"] CVE-2024-12030

WordPress Meta Data and Taxonomies Filter (MDTF) <= 1.3.3.4 - Unauthenticated Arbitrary Shortcode Execution High

October 24, 2024 Patched in ["1.3.3.5"] CVE-2024-50450

WordPress Meta Data and Taxonomies Filter (MDTF) <= 1.3.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

October 24, 2024 Patched in ["1.3.3.5"] CVE-2024-50451

MDTF – Meta Data and Taxonomies Filter <= 1.3.3.3 - Authenticated (Contributor+) SQL Injection Critical

September 23, 2024 Patched in ["1.3.3.4"] CVE-2024-8624

MDTF – Meta Data and Taxonomies Filter <= 1.3.3.3 - Unauthenticated Arbitrary Shortcode Execution High

September 23, 2024 Patched in ["1.3.3.4"] CVE-2024-8623

WordPress Meta Data and Taxonomies Filter (MDTF) <= 1.3.3.2 - Unauthenticated Arbitrary Shortcode Execution Critical

May 3, 2024 Patched in ["1.3.3.3"] CVE-2024-34434

WordPress Meta Data and Taxonomies Filter (MDTF) <= 1.3.3 - Missing Authorization Medium

April 22, 2024 Patched in ["1.3.3.1"] CVE-2024-32818

WordPress Meta Data and Taxonomies Filter (MDTF) <= 1.3.3.1 - Cross-Site Request Forgery Medium

March 28, 2024 Patched in ["1.3.3.2"] CVE-2024-30457

WordPress Meta Data and Taxonomies Filter (MDTF) <= 1.3.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting Medium

March 25, 2024 Patched in ["1.3.3.1"] CVE-2024-29763

WordPress Meta Data and Taxonomies Filter (MDTF) <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

March 25, 2024 Patched in ["1.3.3"] CVE-2024-29906

WordPress Meta Data and Taxonomies Filter (MDTF) <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

March 25, 2024 Patched in ["1.3.3"] CVE-2024-29932

MDTF – Meta Data and Taxonomies Filter <= 1.3.0.1 - Relected Cross-Site Scripting via 'tax_name' Medium

March 20, 2023 Patched in ["1.3.1"] CVE-2023-28664

MDTF – Meta Data and Taxonomies Filter <= 1.3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Medium

January 4, 2023 Patched in ["1.3.1"]

Meta Data Filter & Taxonomies Filter <= 1.2.7.2 - Cross-Site Request Forgery High

July 14, 2021 Patched in ["2.2.8"] CVE-2021-20781

What It Does

MDTF adds front-end filtering widgets to WordPress so visitors can narrow down listings by taxonomies (categories, tags, custom taxonomies) and custom meta fields at the same time. It works out of the box with WooCommerce product attributes and also supports any custom post type, making it usable for any catalog-style site. Results update on the same page without a full reload.

Who It's For

This plugin is a strong fit for stores or directories with large inventories where users need to drill down by detailed attributes, such as real estate listings, job boards, automotive dealers, classifieds, and multi-vendor marketplaces. It suits site owners who want advanced search and filtering without writing custom query code and who are comfortable with a deep settings panel.

Who Should Skip It

If you run a small shop with fewer than a few dozen products or only need basic category filtering, MDTF is overkill and WooCommerce's default layered nav widget will do the job with less setup. Also skip it if you need managed, responsive support, as the developer has not answered a single public thread.

The Bottom Line

MDTF delivers genuinely powerful taxonomy plus meta filtering for WooCommerce and custom post types, with current code and strong user ratings, but it is a niche tool with low adoption and no visible support history. It is worth trying on a staging site if advanced filtering is core to your business, yet small stores and anyone needing dependable developer support should look elsewhere first.

Related Plugins

Germanized for WooCommerce 91/100

Pick this if you operate a German or EU store and need invoicing, legal text, and shipping rule compliance rather than advanced filtering.

PDF Invoices & Packing Slips for WooCommerce

Choose this when invoice and shipping document generation is the missing piece, not product filtering.

Customer Reviews for WooCommerce 89/100

Choose this if your priority is collecting and displaying verified product reviews rather than building search facets.

WooCommerce Stripe Payment Gateway 88/100

Pick Stripe when you need reliable card payments processed by a major gateway, not catalog filtering.

Mercado Pago payments for WooCommerce 88/100

Choose this for Latin American stores that need Mercado Pago's local checkout methods and installment support.