WordPress 3D Printing 3DPrint Lite for WordPress

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:wp3dprinting:3dprint_lite:-:*:*:*:*:wordpress:*:*

part: a version: - update: *

VendorWp3Dprinting (1c51d980-fe66-5081-9f1e-0c34cefadc5e)
Product3Dprint Lite (1bd4ce49-1831-5f31-b0bd-66137cd9dbaa)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/wpplugins/3dprint-lite purl2cpe 2026-06-01 10:12:57.657405

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-10480 vulnerable 2026-06-08 06:23:46.712657 3DPrint Lite < 2.1 - Settings Update via CSRF
The 3DPrint Lite WordPress plugin before 2.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack.
Published: 2024-12-06T06:00:07.090Z
Updated: 2024-12-06T16:03:29.448Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-4436 vulnerable 2026-06-08 05:38:09.438469 3DPrint Lite < 1.9.1.5 - Unauthenticated Arbitrary File Upload
The 3DPrint Lite WordPress plugin before 1.9.1.5 does not have any authorisation and does not check the uploaded file in its p3dlite_handle_upload AJAX action , allowing unauthenticated users to upload arbitrary file to the web server. However, there is a .htaccess, preventing the file to be accessed on Web servers such as Apache.
Published: 2024-02-05T09:02:44.634Z
Updated: 2026-01-09T21:05:31.460Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.