PT-2025-46270 · WordPress · Add Multiple Marker

Hardik Patel · Published 2025-11-11 · Updated 2025-11-11 · CVE-2025-11999

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Add Multiple Marker plugin for WordPress versions up to and including 1.2

Description The Add Multiple Marker plugin for WordPress is susceptible to unauthorized data modification because of a missing capability check in the addmultiplemarker reset map() and amm save map api() functions. This allows unauthenticated attackers to update the map API and reset maps.

Recommendations Update the Add Multiple Marker plugin to a version later than 1.2.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2025-11999

Affected Products

Add Multiple Marker

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-11999 · Security Note
• https://tinyurl.com/2bcmmpxb · Note
• https://wordfence.com/threat-intel/vulnerabilities/id/f4f1467d-1f66-4e99-af44-9329cfe1efac?source=cve · Note
• https://plugins.trac.wordpress.org/changeset/3433258 · Note
• https://plugins.trac.wordpress.org/browser/add-multiple-marker/tags/1.2/functions.php · Note
• https://twitter.com/CVEnew/status/1988095295985422521 · Twitter Post