cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,poc,trended,trended_no_1,published,trended_score
CVE-2024-10480,https://securityvulnerability.io/vulnerability/CVE-2024-10480,CSRF Flaw in Popular WordPress Plugin Exposes Administrative Settings,"CVE-2024-10480 is a critical Cross-Site Request Forgery (CSRF) vulnerability affecting the 3DPrint Lite WordPress plugin prior to version 2.1. This flaw allows malicious actors to leverage a CSRF attack to manipulate configuration settings without the owner’s consent, provided they are logged in as an administrator. The absence of adequate CSRF verification makes it possible for attackers to exploit this security gap, potentially leading to unauthorized changes that could compromise the security of the WordPress site.",Wordpress,3dprint Lite,,,0.0004299999854993075,false,,false,false,true,true,false,false,2024-12-06T06:00:07.090Z,0
CVE-2021-4436,https://securityvulnerability.io/vulnerability/CVE-2021-4436,Unauthorized File Upload Vulnerability in 3DPrint Lite WordPress Plugin,"The 3DPrint Lite plugin for WordPress, when used in versions prior to 1.9.1.5, is susceptible to a file upload vulnerability due to a lack of proper authorization checks in its AJAX action p3dlite_handle_upload. This inadequacy allows unauthenticated users to upload potentially malicious files to the server. Although there are .htaccess rules in place intended to restrict access to these files on servers such as Apache, the risk of uploading unauthorized files could still pose serious security threats to the integrity of the web environment.",Wordpress,3dprint Lite,9.8,CRITICAL,0.02304000034928322,false,,false,false,true,true,false,false,2024-02-05T09:02:44.634Z,0