CVE-2024-10480

Name of the Vulnerable Software and Affected Versions 3DPrint Lite WordPress plugin versions prior to 2.1

Description The issue is related to a lack of CSRF check when updating settings in the 3DPrint Lite WordPress plugin. This could allow attackers to make a logged-in admin change settings via a CSRF attack.

Recommendations For versions prior to 2.1, update to version 2.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the settings update functionality to minimize the risk of exploitation.