CVE-2025-3430

CVE-2025-3430 affects the 3DPrint Lite WordPress plugin. The vulnerability is an SQL Injection in the printer_text parameter in all versions up to 2.1.3.6 caused by insufficient escaping and lack of proper query preparation. Impact: unauthenticated attackers can inject SQL to extract sensitive da...

CVE-2021-4436

The 3DPrint Lite WordPress plugin (versions prior to 1.9.1.5 ) is vulnerable to an unauthenticated arbitrary file upload due to a lack of authorization and file checking in the p3dlite_handle_upload AJAX action. Attackers can upload arbitrary files, including PHP scripts, to the web server. While...

CVE-2025-3429

CVE-2025-3429 affects the WordPress plugin 3DPrint Lite (versions up to 2.1.3.6). The vulnerability is an authenticated (Admin+) SQL Injection via the material_text parameter due to insufficient escaping in the query, enabling an attacker with admin privileges to append additional SQL statements ...

CVE-2025-3427

The CVE CVE-2025-3427 affects the WordPress plugin 3DPrint Lite (

CVE-2025-3428

CVE-2025-3428 affects the WordPress 3DPrint Lite plugin (versions

CVE-2024-10480

The 3DPrint Lite WordPress plugin, in versions prior to 2.1 , is vulnerable to a Cross-Site Request Forgery (CSRF) attack. The root cause is a lack of CSRF checks when updating plugin settings, which could allow an attacker to force a logged-in administrator to modify those settings unknowingly. ...