Approved changes feed: RSS · Atom

cpe:2.3:a:krishaweb:multi_location_marker:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorKrishaweb (5ac2b56d-d077-594f-86dc-5773b162bc60)
ProductMulti Location Marker (cb06c8a3-b515-5b96-ac92-cb142d5a7328)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-11999 vulnerable 2026-06-08 07:04:29.528015 Add Multiple Marker <= 1.2 - Missing Authorization to Unauthenticated Settings Update
MEDIUM (5.3)
The Add Multiple Marker plugin for WordPress is vulnerable to unauthorized modification of data to due to a missing capability check on the addmultiplemarker_reset_map() and amm_save_map_api() functions in all versions up to, and including, 1.2. This makes it possible for unauthenticated attackers to update the map API and reset maps.
Published: 2025-11-11T03:30:52.126Z
Updated: 2026-04-08T17:33:14.387Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.