Read the docs

3dprint Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

3dprint Project records in CISA KEV

No 3dprint Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
3dprint 2 records HIGH

Records

2 records in 3dprint · all components

TI-2022-03576 CVE-2022-3899 · GHSA-279h-8hwx-39m5

3DPrint < 3.5.6.9 - Arbitrary File and Directory Deletion via CSRF

Priority HIGH 68

The 3dprint WordPress plugin before 3.5.6.9 does not protect against CSRF attacks in the modified version of Tiny File Manager included with the plugin, allowing an attacker to craft a malicious request that will delete…

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00404 Published 2024-01-16 Fixed in 3.5.6.9 CWE-352
TI-2022-03692 CVE-2022-4023 · GHSA-gv89-h5g3-2xc2

3DPrint < 3.5.6.9 - CSRF to arbitrary file downlad

Priority MEDIUM 57

The 3DPrint WordPress plugin before 3.5.6.9 does not protect against CSRF attacks in the modified version of Tiny File Manager included with the plugin, allowing an attacker to craft a malicious request that will create…

CVSS 3.1MEDIUM 5.3 Network No auth User interaction EPSS 0.00352 Published 2023-07-17 Fixed in 3.5.6.9
Open these records in search →