cleantalk
Vulnerabilities and Security Researches

3DPrint Lite, CVE-2024-10480

CVE, Research URL

CVE-2024-10480

Application

3DPrint Lite

Published on
Dec 06, 2024
Research Description
The 3DPrint Lite WordPress plugin before 2.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack.
Affected versions
Min -, max 2.1.
Status
vulnerable