Approved changes feed: RSS · Atom

cpe:2.3:a:krishaweb:add_multiple_marker:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorKrishaweb (5ac2b56d-d077-594f-86dc-5773b162bc60)
ProductAdd Multiple Marker (7895a1b3-dc65-51fb-ba67-915b265d9fd1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-11999 vulnerable 2026-06-08 07:04:29.528758 Add Multiple Marker <= 1.2 - Missing Authorization to Unauthenticated Settings Update
MEDIUM (5.3)
The Add Multiple Marker plugin for WordPress is vulnerable to unauthorized modification of data to due to a missing capability check on the addmultiplemarker_reset_map() and amm_save_map_api() functions in all versions up to, and including, 1.2. This makes it possible for unauthenticated attackers to update the map API and reset maps.
Published: 2025-11-11T03:30:52.126Z
Updated: 2026-04-08T17:33:14.387Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45080 vulnerable 2026-06-08 05:50:35.585074 WordPress Add Multiple Marker Plugin <= 1.2 is vulnerable to Cross Site Request Forgery (CSRF)
MEDIUM (5.4)
Cross-Site Request Forgery (CSRF) vulnerability in KrishaWeb Add Multiple Marker plugin <= 1.2 versions.
Published: 2023-04-23T11:13:12.399Z
Updated: 2026-04-28T16:07:51.974Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.