Medium · 4.3 CVE-2025-48259 EUVD-2025-28178GHSA-4h92-m3v8-rjmc

WordPress WP Mapa Politico España plugin <= 3.8.0 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability

Published May 19, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Juan Carlos Product: WP Mapa Politico España

Description

Cross-Site Request Forgery (CSRF) vulnerability in Juan Carlos WP Mapa Politico España wp-mapa-politico-spain allows Cross Site Request Forgery.This issue affects WP Mapa Politico España: from n/a through <= 3.8.0.

Affected products

Vendor	Product	Affected	Fixed
Juan Carlos	WP Mapa Politico España	≤ 3.8.0	—

References

https://patchstack.com/database/Wordpress/Plugin/wp-mapa-politico-spain/vulnerability/wordpress-wp-mapa-politico-espana-plugin-3-8-0-cross-site-request-forgery-csrf-to-settings-change-vulnerability?_s_id=cve vdb-entry