PatchTheCVE3dprint lite vulnerabilities and fixes
Recent CVEs affecting 3dprint lite, with upgrade or downgrade steps. 5 tracked.
Also searched as: 3dprintlite.
3dprint lite has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2025-04-08. Highest priority: CVE-2025-3430 (score 26/100).
- CVE-2025-3430 MEDIUM 4.9 UPGRADE The 3DPrint Lite plugin for WordPress is vulnerable to SQL Injection via the 'printer_text' parameter in all v
- CVE-2025-3429 MEDIUM 4.9 UPGRADE The 3DPrint Lite plugin for WordPress is vulnerable to SQL Injection via the 'material_text' parameter in all
- CVE-2025-3428 MEDIUM 4.9 UPGRADE The 3DPrint Lite plugin for WordPress is vulnerable to SQL Injection via the 'coating_text' parameter in all v
- CVE-2025-3427 MEDIUM 4.9 UPGRADE The 3DPrint Lite plugin for WordPress is vulnerable to SQL Injection via the 'infill_text' parameter in all ve
- CVE-2024-10480 MEDIUM 4.3 UPGRADE The 3DPrint Lite WordPress plugin before 2.1 does not have CSRF check in place when updating its settings, whi
FAQ
How do I fix 3dprint lite vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is 3dprint lite being exploited right now?
None of the tracked 3dprint lite CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which 3dprint lite CVE should I patch first?
CVE-2025-3430 currently ranks highest (26/100): The 3DPrint Lite plugin for WordPress is vulnerable to SQL Injection via the 'printer_text' parameter in all v.