Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: 3dprint Project Clear all filters
TI-2022-03576 CVE-2022-3899 · GHSA-279h-8hwx-39m5

3DPrint < 3.5.6.9 - Arbitrary File and Directory Deletion via CSRF

Priority HIGH 68

The 3dprint WordPress plugin before 3.5.6.9 does not protect against CSRF attacks in the modified version of Tiny File Manager included with the plugin, allowing an attacker to craft a malicious request that will delete…

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00404 Published 2024-01-16 Fixed in 3.5.6.9 CWE-352
TI-2022-03692 CVE-2022-4023 · GHSA-gv89-h5g3-2xc2

3DPrint < 3.5.6.9 - CSRF to arbitrary file downlad

Priority MEDIUM 57

The 3DPrint WordPress plugin before 3.5.6.9 does not protect against CSRF attacks in the modified version of Tiny File Manager included with the plugin, allowing an attacker to craft a malicious request that will create…

CVSS 3.1MEDIUM 5.3 Network No auth User interaction EPSS 0.00352 Published 2023-07-17 Fixed in 3.5.6.9