Unknown 3Dprint Lite vulnerabilities

2 vulnerabilities

Known vulnerabilities in Unknown 3Dprint Lite, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CVE-2021-4436unknown3dprint lite+2
EPSS score
6.65%
The 3DPrint Lite WordPress plugin before 1.9.1.5 does not have any authorisation and does not check the uploaded file in its p3dlite_handle_upload AJAX action , allowing unauthenticated users to upload arbitrary file to the web server. However, there is a .htaccess, preventing the file to be accessed on Web servers such as Apache.4.3CVE-2024-10480unknown3dprint lite+2
EPSS score
0.20%
The 3DPrint Lite WordPress plugin before 2.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack.