Add Multiple Marker, CVE-2022-45081

CVE, Research URL: CVE-2022-45081
Home page URL: Security reports for Add Multiple Marker
Application: Add Multiple Marker
Published on: -
Research Description: The Add Multiple Marker plugin for WordPress is vulnerable authorization bypass in versions up to, and including, 1.2. This is due to lacking authentication checks on certain user functions like addmultiplemarker_save_maps_data() which is called via a nopriv AJAX action. This makes it possible for unauthenticated attackers to make plugin settings changes.
Affected versions: Min -, max 1.2.
Status: vulnerable