vulnerability
WordPress Plugin: add-multiple-marker: CVE-2022-45081: Missing Authorization
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 6 | (AV:N/AC:L/Au:N/C:P/I:P/A:N) | Nov 11, 2022 | Feb 4, 2026 | Feb 4, 2026 |
Severity
6
CVSS
(AV:N/AC:L/Au:N/C:P/I:P/A:N)
Published
Nov 11, 2022
Added
Feb 4, 2026
Modified
Feb 4, 2026
Description
The Add Multiple Marker plugin for WordPress is vulnerable authorization bypass in versions up to, and including, 1.2. This is due to lacking authentication checks on certain user functions like addmultiplemarker_save_maps_data() which is called via a nopriv AJAX action. This makes it possible for unauthenticated attackers to make plugin settings changes.
Solution
add-multiple-marker-plugin-cve-2022-45081
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.