Wp3dprinting

3dprint Lite

6 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.9

CVE-2025-3428

  • EPSS 0.06%
  • Veröffentlicht 08.04.2025 07:01:03
  • Zuletzt bearbeitet 10.07.2025 14:18:19

The 3DPrint Lite plugin for WordPress is vulnerable to SQL Injection via the 'coating_text' parameter in all versions up to, and including, 2.1.3.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the ...

4.9

CVE-2025-3430

  • EPSS 0.06%
  • Veröffentlicht 08.04.2025 07:01:02
  • Zuletzt bearbeitet 10.07.2025 14:18:52

The 3DPrint Lite plugin for WordPress is vulnerable to SQL Injection via the 'printer_text' parameter in all versions up to, and including, 2.1.3.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the ...

4.9

CVE-2025-3427

  • EPSS 0.06%
  • Veröffentlicht 08.04.2025 07:01:01
  • Zuletzt bearbeitet 10.07.2025 14:18:07

The 3DPrint Lite plugin for WordPress is vulnerable to SQL Injection via the 'infill_text' parameter in all versions up to, and including, 2.1.3.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the e...

4.9

CVE-2025-3429

  • EPSS 0.06%
  • Veröffentlicht 08.04.2025 07:01:01
  • Zuletzt bearbeitet 10.07.2025 14:18:42

The 3DPrint Lite plugin for WordPress is vulnerable to SQL Injection via the 'material_text' parameter in all versions up to, and including, 2.1.3.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...

4.3

CVE-2024-10480

Exploit
  • EPSS 0.05%
  • Veröffentlicht 06.12.2024 06:15:19
  • Zuletzt bearbeitet 17.05.2025 01:54:01

The 3DPrint Lite WordPress plugin before 2.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack.

9.8

CVE-2021-4436

Exploit
  • EPSS 73.89%
  • Veröffentlicht 05.02.2024 09:15:43
  • Zuletzt bearbeitet 21.11.2024 06:37:43

The 3DPrint Lite WordPress plugin before 1.9.1.5 does not have any authorisation and does not check the uploaded file in its p3dlite_handle_upload AJAX action , allowing unauthenticated users to upload arbitrary file to the web server. However, there...