CVE-2025-3427

Summary

CVE-2025-3427 is a vulnerability affecting the 3DPrint Lite plugin for WordPress. This issue allows unauthenticated attackers to inject SQL queries into the 'infill_text' parameter. The plugin fails to properly escape user-supplied data and prepare existing SQL queries, creating a risk of data extraction. Versions up to and including 2.1.3.6 are impacted. Attackers can exploit this vulnerability by appending malicious SQL queries to legitimate ones, potentially gaining access to sensitive database information. WordPress users are advised to update their 3DPrint Lite plugin to a patched version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.