CVE-2022-4023

CVE-2022-4023 describes a Cross-Site Request Forgery (CSRF) vulnerability in the 3DPrint WordPress plugin versions prior to 3.5.6.9. An attacker can exploit this by tricking a logged-in administrator into submitting a malicious form, leading to the creation of an archive containing arbitrary server files. The vulnerability has a CVSS score of 5.3 (Medium) due to its network-based attack vector, high attack complexity, and high potential for confidentiality impact, as sensitive data like database credentials can be leaked. There is currently no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.