CVE-2021-4436 3DPrint Lite < 1.9.1.5 - Unauthenticated Arbitrary File Upload
Unauthenticated attackers can upload arbitrary files via the AJAX action, potentially leading to code execution on the web server.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-4436?
CVE-2021-4436 is a critical vulnerability in Unknown 3DPrint Lite, published on 5 Feb 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The 3DPrint Lite WordPress plugin before 1.9.1.5 does not have any authorisation and does not check the uploaded file in its p3dlite_handle_upload AJAX action , allowing unauthenticated users to upload arbitrary file to the web server. However, there is a .htaccess, preventing the file to be accessed on Web servers such as Apache.
Weakness: CWE-434
Which versions are affected by CVE-2021-4436?
It affects 1 product.
Products include Wp3dprinting 3dprint Lite.
How do I fix CVE-2021-4436?
No fix has been published for CVE-2021-4436 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-4436 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2021-4436 exists.
Public exploit code: 1 Nuclei template.
Other vulnerabilities in Unknown 3DPrint Lite
- CVE-2025-3427 3DPrint Lite <=2.1.3.6 - Authenticated (Admin+) SQL Injection via 'infill_text'
- CVE-2025-3428 3DPrint Lite <=2.1.3.6 - Authenticated (Admin+) SQL Injection via 'coating_text'
- CVE-2025-3429 3DPrint Lite <=2.1.3.6 - Authenticated (Admin+) SQL Injection via 'material_text'
- CVE-2025-3430 3DPrint Lite <=2.1.3.6 - Authenticated (Admin+) SQL Injection via 'printer_text'
- CVE-2024-10480 3DPrint Lite < 2.1 - Settings Update via CSRF
Sources
Also known as GHSA-v78v-jm8m-vmmw.