CVE-2025-3428

Summary

CVE-2025-3428 is a vulnerability affecting the 3DPrint Lite plugin for WordPress. This issue allows unauthenticated attackers to inject SQL queries into the plugin via the 'coating_text' parameter due to insufficient escaping and inadequate query preparation. The attacker can then extract sensitive information from the database by appending malicious SQL commands to legitimate queries. WordPress users running versions 2.1.3.6 and below of the 3DPrint Lite plugin are at risk and should update to a patched version as soon as possible to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.