Wp3dprinting 3dprint Lite — known CVE vulnerabilities

Every CVE whose affected-product data names Wp3dprinting 3dprint Lite, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2021-4436 — CVSS 9.8 (critical): The 3DPrint Lite WordPress plugin before 1.9.1.5 does not have any authorisation and does not check the uploaded file in its…
• CVE-2025-3427 — CVSS 4.9 (medium): The 3DPrint Lite plugin for WordPress is vulnerable to SQL Injection via the 'infill_text' parameter in all versions up to, and including…
• CVE-2025-3428 — CVSS 4.9 (medium): The 3DPrint Lite plugin for WordPress is vulnerable to SQL Injection via the 'coating_text' parameter in all versions up to, and including…
• CVE-2025-3429 — CVSS 4.9 (medium): The 3DPrint Lite plugin for WordPress is vulnerable to SQL Injection via the 'material_text' parameter in all versions up to, and…
• CVE-2025-3430 — CVSS 4.9 (medium): The 3DPrint Lite plugin for WordPress is vulnerable to SQL Injection via the 'printer_text' parameter in all versions up to, and including…
• CVE-2024-10480 — CVSS 4.3 (medium): The 3DPrint Lite WordPress plugin before 2.1 does not have CSRF check in place when updating its settings, which could allow attackers to…