CVE-2025-3430

CVE-2025-3430 affects the 3DPrint Lite WordPress plugin. The vulnerability is an SQL Injection in the printer_text parameter in all versions up to 2.1.3.6 caused by insufficient escaping and lack of proper query preparation. Impact: unauthenticated attackers can inject SQL to extract sensitive da...

CVE-2025-3429

CVE-2025-3429 affects the WordPress plugin 3DPrint Lite (versions up to 2.1.3.6). The vulnerability is an authenticated (Admin+) SQL Injection via the material_text parameter due to insufficient escaping in the query, enabling an attacker with admin privileges to append additional SQL statements ...

CVE-2025-3428

CVE-2025-3428 affects the WordPress 3DPrint Lite plugin (versions

CVE-2021-4436

The CVE-2021-4436 entry corresponds to the WordPress plugin 3DPrint Lite, affected versions prior to 1.9.1.5. The vulnerability is an unauthenticated arbitrary file upload via the p3dlite_handle_upload AJAX action, caused by missing authorization and file validation. The presence of a .htaccess d...

CVE-2025-3427

The CVE CVE-2025-3427 affects the WordPress plugin 3DPrint Lite (

CVE-2024-10480

CVE-2024-10480 affects the 3DPrint Lite WordPress plugin prior to 2.1. The issue is a missing CSRF check when updating plugin settings, enabling a logged-in attacker to change settings via CSRF. The Red Hat/NVD entries describe the same flaw and patch in version 2.1 or later. Impact is limited to...