CVE-2022-3899

The CVE-2022-3899 entry describes a CSRF vulnerability in the 3dprint WordPress plugin (versions prior to 3.5.6.9) that uses a modified Tiny File Manager. The underlying issue is a lack of CSRF protection in the file management component, allowing an attacker to craft a request that can delete fi...

CVE-2022-4023

The CVE-2022-4023 issue affects the 3DPrint WordPress plugin prior to version 3.5.6.9. A CSRF vulnerability in the modified Tiny File Manager component allows an authenticated admin to trigger creation of an archive containing arbitrary files and directories. The archive is created at a predictab...