CVE-2021-4436 Scanner
CVE-2021-4436 Scanner - Arbitrary File Upload vulnerability in 3DPrint Lite
Used 3.2k times · 3.3k assets checked · domain, ipv4, subdomain
CVE
CVE-2021-4436
9.8
CVSScritical
Exploitable remotely over the internet · no authentication required.
Description
The 3DPrint Lite WordPress plugin before 1.9.1.5 does not have any authorisation and does not check the uploaded file in its p3dlite_handle_upload AJAX action , allowing unauthenticated users to upload arbitrary file to the web server. However, there is a .htaccess, preventing the file to be accessed on Web servers such as Apache.
Attack Vector
Network
Privileges Req.
None
User Interaction
None
3dprint lite3dprint_lite
Updated Sep 26, 2026View on NVD →
S4E scanner
CVE history: 3dprint lite
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →