Approved changes feed: RSS · Atom

cpe:2.3:a:fuzzoid:3dprint_lite:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorFuzzoid (28781d4d-905c-5ea5-83fb-2a0ae67afe3b)
Product3Dprint Lite (a0dbc006-6242-5f70-8e89-b7ff3a468405)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-3430 vulnerable 2026-06-08 07:23:08.834345 3DPrint Lite <=2.1.3.6 - Authenticated (Admin+) SQL Injection via 'printer_text'
MEDIUM (4.9)
The 3DPrint Lite plugin for WordPress is vulnerable to SQL Injection via the 'printer_text' parameter in all versions up to, and including, 2.1.3.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
Published: 2025-04-08T07:01:02.412Z
Updated: 2026-04-08T17:00:36.505Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-3429 vulnerable 2026-06-08 07:23:08.834068 3DPrint Lite <=2.1.3.6 - Authenticated (Admin+) SQL Injection via 'material_text'
MEDIUM (4.9)
The 3DPrint Lite plugin for WordPress is vulnerable to SQL Injection via the 'material_text' parameter in all versions up to, and including, 2.1.3.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
Published: 2025-04-08T07:01:01.984Z
Updated: 2026-04-08T16:47:37.083Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-3428 vulnerable 2026-06-08 07:23:08.833654 3DPrint Lite <=2.1.3.6 - Authenticated (Admin+) SQL Injection via 'coating_text'
MEDIUM (4.9)
The 3DPrint Lite plugin for WordPress is vulnerable to SQL Injection via the 'coating_text' parameter in all versions up to, and including, 2.1.3.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
Published: 2025-04-08T07:01:03.563Z
Updated: 2026-04-08T17:31:03.437Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-3427 vulnerable 2026-06-08 07:23:08.832314 3DPrint Lite <=2.1.3.6 - Authenticated (Admin+) SQL Injection via 'infill_text'
MEDIUM (4.9)
The 3DPrint Lite plugin for WordPress is vulnerable to SQL Injection via the 'infill_text' parameter in all versions up to, and including, 2.1.3.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
Published: 2025-04-08T07:01:01.247Z
Updated: 2026-04-08T16:36:56.981Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30865 vulnerable 2026-06-08 07:17:01.951861 WordPress 3DPrint Lite plugin <= 2.1.3.5 - Cross Site Request Forgery (CSRF) vulnerability
MEDIUM (4.3)
Cross-Site Request Forgery (CSRF) vulnerability in fuzzoid 3DPrint Lite 3dprint-lite allows Cross Site Request Forgery.This issue affects 3DPrint Lite: from n/a through <= 2.1.3.5.
Published: 2025-03-27T10:55:34.072Z
Updated: 2026-04-28T16:11:59.150Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.