Lucene search
+L

68 matches found

Positive Technologies
Positive Technologies
added 2025/04/08 12:0 a.m.7 views

PT-2025-15380 · WordPress · 3Dprint Lite

Name of the Vulnerable Software and Affected Versions: 3DPrint Lite plugin for WordPress versions up to, and including, 2.1.3.6 Description: The issue arises from insufficient escaping on the user-supplied infill text parameter and lack of sufficient preparation on the existing SQL query, making ...

4.9CVSS9.7AI score0.00379EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2025/04/08 12:0 a.m.6 views

WordPress plugin 3DPrint Lite SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A SQL injection...

4.9CVSS8.7AI score0.00386EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/04/08 12:0 a.m.7 views

WordPress plugin 3DPrint Lite SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A SQL injection...

4.9CVSS8.7AI score0.00386EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/04/08 12:0 a.m.7 views

PT-2025-15382 · WordPress · 3Dprint Lite

Name of the Vulnerable Software and Affected Versions: 3DPrint Lite plugin for WordPress versions up to, and including, 2.1.3.6 Description: The issue arises from insufficient escaping on the user-supplied material text parameter and lack of sufficient preparation on the existing SQL query, makin...

4.9CVSS9.4AI score0.00386EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2025/04/08 12:0 a.m.14 views

PT-2025-15381

Name of the Vulnerable Software and Affected Versions: 3DPrint Lite plugin for WordPress versions up to, and including, 2.1.3.6 Description: The issue allows unauthenticated attackers to perform SQL Injection via the coating text parameter due to insufficient escaping of user-supplied input and...

4.9CVSS7.2AI score0.00386EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2025/04/08 12:0 a.m.10 views

PT-2025-15383 · WordPress · 3Dprint Lite

Name of the Vulnerable Software and Affected Versions: 3DPrint Lite plugin for WordPress versions up to, and including, 2.1.3.6 Description: The issue arises from insufficient escaping on the user-supplied printer text parameter and lack of sufficient preparation on the existing SQL query, making...

4.9CVSS6.4AI score0.00386EPSS
SaveExploits0References8
Patchstack
Patchstack
added 2025/04/07 6:51 p.m.7 views

WordPress 3DPrint Lite plugin <= 2.1.3.6 - Authenticated (Admin+) SQL Injection via 'printer_text' vulnerability

Authenticated Admin+ SQL Injection via 'printertext' vulnerability discovered by WordFence in WordPress Plugin 3DPrint Lite versions = 2.1.3.6...

4.9CVSS7.4AI score0.00386EPSS
SaveExploits0References1Affected Software1
WPVulnDB
WPVulnDB
added 2025/04/07 12:0 a.m.12 views

3DPrint Lite <=2.1.3.6 - Authenticated (Admin+) SQL Injection via 'coating_text'

Description The 3DPrint Lite plugin for WordPress is vulnerable to SQL Injection via the 'coatingtext' parameter in all versions up to, and including, 2.1.3.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...

4.9CVSS7.5AI score0.00386EPSS
SaveExploits0References1
WPVulnDB
WPVulnDB
added 2025/04/07 12:0 a.m.11 views

3DPrint Lite <=2.1.3.6 - Authenticated (Admin+) SQL Injection via 'infill_text'

Description The 3DPrint Lite plugin for WordPress is vulnerable to SQL Injection via the 'infilltext' parameter in all versions up to, and including, 2.1.3.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...

4.9CVSS7.5AI score0.00379EPSS
SaveExploits0References1
WPVulnDB
WPVulnDB
added 2025/04/07 12:0 a.m.11 views

3DPrint Lite <=2.1.3.6 - Authenticated (Admin+) SQL Injection via 'printer_text'

Description The 3DPrint Lite plugin for WordPress is vulnerable to SQL Injection via the 'printertext' parameter in all versions up to, and including, 2.1.3.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...

4.9CVSS7.5AI score0.00386EPSS
SaveExploits0References1
WPVulnDB
WPVulnDB
added 2025/04/02 12:0 a.m.12 views

3DPrint Lite < 2.1.3.6 - Cross-Site Request Forgery

Description The 3DPrint Lite plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.3.5. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to perform an unauthorized action...

4.3CVSS6.7AI score0.00197EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/03/29 12:16 p.m.27 views

CVE-2025-30865

Cross-Site Request Forgery CSRF vulnerability in fuzzoid 3DPrint Lite 3dprint-lite allows Cross Site Request Forgery.This issue affects 3DPrint Lite: from n/a through = 2.1.3.5...

4.3CVSS7.2AI score0.00197EPSS
SaveExploits0References1
NVD
NVD
added 2025/03/27 11:15 a.m.22 views

CVE-2025-30865

Cross-Site Request Forgery CSRF vulnerability in fuzzoid 3DPrint Lite 3dprint-lite allows Cross Site Request Forgery.This issue affects 3DPrint Lite: from n/a through = 2.1.3.5...

4.3CVSS0.00197EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/03/27 10:55 a.m.6 views

CVE-2025-30865 WordPress 3DPrint Lite plugin <= 2.1.3.5 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in fuzzoid 3DPrint Lite 3dprint-lite allows Cross Site Request Forgery.This issue affects 3DPrint Lite: from n/a through = 2.1.3.5...

4.3CVSS7.3AI score0.00197EPSS
SaveExploits0References1
CVE
CVE
added 2025/03/27 10:55 a.m.59 views

CVE-2025-30865

CVE-2025-30865: CSRF in 3DPrint Lite (WordPress plugin) affecting 3DPrint Lite versions up to 2.1.3.5. Connected sources indicate the issue exists and that a patch has been applied (patched), with no exploit details provided in the documents. Update the plugin to remain secure.

4.3CVSS7.2AI score0.00197EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/03/27 10:55 a.m.31 views

CVE-2025-30865 WordPress 3DPrint Lite plugin <= 2.1.3.5 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in fuzzoid 3DPrint Lite 3dprint-lite allows Cross Site Request Forgery.This issue affects 3DPrint Lite: from n/a through = 2.1.3.5...

4.3CVSS0.00197EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/03/27 12:0 a.m.5 views

WordPress plugin 3DPrint Lite 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A cross-site request forge...

4.3CVSS8.5AI score0.00197EPSS
SaveExploits0References2
NVD
NVD
added 2024/12/06 6:15 a.m.25 views

CVE-2024-10480

The 3DPrint Lite WordPress plugin before 2.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

4.3CVSS0.00193EPSS
SaveExploits2References1
OSV
OSV
added 2024/12/06 6:15 a.m.3 views

CVE-2024-10480

The 3DPrint Lite WordPress plugin before 2.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

4.3CVSS7.3AI score0.00193EPSS
SaveExploits2References1
Vulnrichment
Vulnrichment
added 2024/12/06 6:0 a.m.15 views

CVE-2024-10480 3DPrint Lite < 2.1 - Settings Update via CSRF

The 3DPrint Lite WordPress plugin before 2.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

6.7AI score0.00193EPSS
SaveExploits2References1
Rows per page
Query Builder