Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:3dprint_lite:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
Product3Dprint Lite (7e3f6138-02e0-51a2-95bb-3f9c1740ac64)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-10480 vulnerable 2026-06-08 06:23:46.721713 3DPrint Lite < 2.1 - Settings Update via CSRF
The 3DPrint Lite WordPress plugin before 2.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack.
Published: 2024-12-06T06:00:07.090Z
Updated: 2024-12-06T16:03:29.448Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-4436 vulnerable 2026-06-08 05:38:09.439389 3DPrint Lite < 1.9.1.5 - Unauthenticated Arbitrary File Upload
The 3DPrint Lite WordPress plugin before 1.9.1.5 does not have any authorisation and does not check the uploaded file in its p3dlite_handle_upload AJAX action , allowing unauthenticated users to upload arbitrary file to the web server. However, there is a .htaccess, preventing the file to be accessed on Web servers such as Apache.
Published: 2024-02-05T09:02:44.634Z
Updated: 2026-01-09T21:05:31.460Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.