Description
The 3DPrint Lite WordPress plugin before 1.9.1.5 does not have any authorisation and does not check the uploaded file in its p3dlite_handle_upload AJAX action , allowing unauthenticated users to upload arbitrary file to the web server. However, there is a .htaccess, preventing the file to be accessed on Web servers such as Apache.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | 3DPrint Lite | < 1.9.1.5 | 1.9.1.5 |
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- 3DPrint Lite < 1.9.1.5 - Arbitrary File Upload http/cves/2021/CVE-2021-4436.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.
References
- https://wpscan.com/vulnerability/c46ecd0d-a132-4ad6-b936-8acde3a09282/ exploit vdb-entry technical-description