Vulnerabilities

TI-2026-07634 CVE-2026-8688 · GHSA-239x-hvpx-225m

Missing authorization in krishaweb Advance Nav Menu Manager

LOW 20

The Advance Nav Menu Manager plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.3.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00394 Published 2026-06-24 No fix listed CWE-862

TI-2025-11001 CVE-2025-11999 · GHSA-5q9w-j2qg-xw5x

Add Multiple Marker <= 1.2 - Missing Authorization to Unauthenticated Settings Update

LOW 30

The Add Multiple Marker plugin for WordPress is vulnerable to unauthorized modification of data to due to a missing capability check on the addmultiplemarker_reset_map() and amm_save_map_api() functions in all versions u…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00289 Published 2025-11-11 No fix listed CWE-862

TI-2024-10102 CVE-2024-10898 · GHSA-cgcp-gvp8-4fpv

Contact Form 7 Email Add on <= 1.9 - Authenticated (Contributor+) Local File Inclusion

MEDIUM 43

The Contact Form 7 Email Add on plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.9 via the cf7_email_add_on_add_admin_template() function.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01302 Published 2024-11-21 No fix listed CWE-98

TI-2022-22170 CVE-2022-45080 · GHSA-65c4-xx3j-xwcj

WordPress Add Multiple Marker Plugin <= 1.2 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in KrishaWeb Add Multiple Marker plugin <= 1.2 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00264 Published 2023-04-23 No fix listed CWE-352

Vulnerabilities

Filters

Missing authorization in krishaweb Advance Nav Menu Manager

Add Multiple Marker <= 1.2 - Missing Authorization to Unauthenticated Settings Update

Contact Form 7 Email Add on <= 1.9 - Authenticated (Contributor+) Local File Inclusion

WordPress Add Multiple Marker Plugin <= 1.2 is vulnerable to Cross Site Request Forgery (CSRF)