WP Mapa Politico España <= 3.8.0 - Cross-Site Request Forgery
medium
The WP Mapa Politico España plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.8.0. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to perform an unauthorized action granted they can trick a si...
- CVSS:
- 4.3
- Affected:
- up to 3.8.0
- Fixed in:
- 3.8.1
- Disclosed:
- May 19, 2025
CVE-2025-48259 on NVD →
WP Mapa Politico España [wp-mapa-politico-spain] < 3.8.1
unknown
[en] Cross-Site Request Forgery (CSRF) vulnerability in Juan Carlos WP Mapa Politico España allows Cross Site Request Forgery. This issue affects WP Mapa Politico España: from n/a through 3.8.0.
- Affected:
- up to 3.8.1
- Fixed in:
- 3.8.1
- Disclosed:
- May 19, 2025
CVE-2025-48259 on NVD →
WP Mapa Politico España [wp-mapa-politico-spain] < 3.7.0
unknown
[en] The WP Mapa Politico Espana WordPress plugin before 3.7.0 does not sanitise or escape some of its settings before outputting them in attributes, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed
- Affected:
- up to 3.7.0
- Fixed in:
- 3.7.0
- Disclosed:
- Sep 20, 2021
CVE-2021-24609 on NVD →
Mapa Politico España < 3.7.0 - Stored Cross-Site Scripting
medium
The WP Mapa Politico Espana WordPress plugin before 3.7.0 does not sanitise or escape some of its settings before outputting them in attributes, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed
- CVSS:
- 5.5
- Affected:
- up to 3.7.0
- Fixed in:
- 3.7.0
- Disclosed:
- Aug 5, 2021
CVE-2021-24609 on NVD →
Protect your WordPress site
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free
← Back to the vulnerability database