Add Multiple Marker Vulnerabilities

The Add Multiple Marker plugin for WordPress is vulnerable to unauthorized modification of data to due to a missing capability check on the addmultiplemarker_reset_map() and amm_save_map_api() functions in all versions up to, and including, 1.2. This makes it possible for unauthenticated attackers to update the map API...

CVSS:

5.3

Affected:

up to 1.2

Fixed in:

1.3

Disclosed:

Nov 10, 2025

CVE-2025-11999 on NVD →

The Add Multiple Marker plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2. This is due to missing or incorrect nonce validation on several functions like addmultiplemarker_save_maps_data(). This makes it possible for unauthenticated attackers to modify the plugin's s...

CVSS:

8.8

Affected:

up to 1.2

Fixed in:

1.3

Disclosed:

Nov 11, 2022

CVE-2022-45080 on NVD →

The Add Multiple Marker plugin for WordPress is vulnerable authorization bypass in versions up to, and including, 1.2. This is due to lacking authentication checks on certain user functions like addmultiplemarker_save_maps_data() which is called via a nopriv AJAX action. This makes it possible for unauthenticated attac...

CVSS:

6.5

Affected:

up to 1.2

Fixed in:

1.3

Disclosed:

Nov 11, 2022

CVE-2022-45081 on NVD →