Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

6 records

Vendor: fuzzoid Component: 3dprint Lite Clear all filters
TI-2025-03011 CVE-2025-3428 · GHSA-7m7g-9mxm-gx68

3DPrint Lite <=2.1.3.6 - Authenticated (Admin+) SQL Injection via 'coating_text'

Priority LOW 23

The 3DPrint Lite plugin for WordPress is vulnerable to SQL Injection via the 'coating_text' parameter in all versions up to, and including, 2.1.3.6 due to insufficient escaping on the user supplied parameter and lack of…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00418 Published 2025-04-08 No fix listed CWE-89
TI-2025-03013 CVE-2025-3430 · GHSA-r6qr-p289-mf47

3DPrint Lite <=2.1.3.6 - Authenticated (Admin+) SQL Injection via 'printer_text'

Priority LOW 23

The 3DPrint Lite plugin for WordPress is vulnerable to SQL Injection via the 'printer_text' parameter in all versions up to, and including, 2.1.3.6 due to insufficient escaping on the user supplied parameter and lack of…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00418 Published 2025-04-08 No fix listed CWE-89
TI-2025-03012 CVE-2025-3429 · GHSA-27wf-jhgm-qm73

3DPrint Lite <=2.1.3.6 - Authenticated (Admin+) SQL Injection via 'material_text'

Priority LOW 23

The 3DPrint Lite plugin for WordPress is vulnerable to SQL Injection via the 'material_text' parameter in all versions up to, and including, 2.1.3.6 due to insufficient escaping on the user supplied parameter and lack of…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00418 Published 2025-04-08 No fix listed CWE-89
TI-2025-03010 CVE-2025-3427 · GHSA-fgjp-62hh-5jp8

3DPrint Lite <=2.1.3.6 - Authenticated (Admin+) SQL Injection via 'infill_text'

Priority LOW 23

The 3DPrint Lite plugin for WordPress is vulnerable to SQL Injection via the 'infill_text' parameter in all versions up to, and including, 2.1.3.6 due to insufficient escaping on the user supplied parameter and lack of s…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00411 Published 2025-04-08 No fix listed CWE-89
TI-2024-09708 CVE-2024-10480 · GHSA-4rc8-3mc7-r96j

3DPrint Lite < 2.1 - Settings Update via CSRF

Priority MEDIUM 53

The 3DPrint Lite WordPress plugin before 2.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00199 Published 2024-12-06 Fixed in 2.1 CWE-352
TI-2021-03292 CVE-2021-4436 · GHSA-v78v-jm8m-vmmw

3DPrint Lite < 1.9.1.5 - Unauthenticated Arbitrary File Upload

Priority HIGH 82

The 3DPrint Lite WordPress plugin before 1.9.1.5 does not have any authorisation and does not check the uploaded file in its p3dlite_handle_upload AJAX action , allowing unauthenticated users to upload arbitrary file to…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.06646 Published 2024-02-05 Fixed in 1.9.1.5 CWE-434