plugin

Wp Mapa Politico Spain Vulnerabilities

4 known security issues reported for the Wp Mapa Politico Spain WordPress plugin. Most recent disclosed May 19, 2025.

2 medium

Running Wp Mapa Politico Spain on your site? Check whether your installed version is affected.

Scan your site free

WP Mapa Politico España <= 3.8.0 - Cross-Site Request Forgery

medium

The WP Mapa Politico España plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.8.0. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to perform an unauthorized action granted they can trick a si...

CVSS:
4.3
Affected:
up to 3.8.0
Fixed in:
3.8.1
Disclosed:
May 19, 2025

CVE-2025-48259 on NVD →

WP Mapa Politico España [wp-mapa-politico-spain] < 3.8.1

unknown

[en] Cross-Site Request Forgery (CSRF) vulnerability in Juan Carlos WP Mapa Politico España allows Cross Site Request Forgery. This issue affects WP Mapa Politico España: from n/a through 3.8.0.

Affected:
up to 3.8.1
Fixed in:
3.8.1
Disclosed:
May 19, 2025

CVE-2025-48259 on NVD →

WP Mapa Politico España [wp-mapa-politico-spain] < 3.7.0

unknown

[en] The WP Mapa Politico Espana WordPress plugin before 3.7.0 does not sanitise or escape some of its settings before outputting them in attributes, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed

Affected:
up to 3.7.0
Fixed in:
3.7.0
Disclosed:
Sep 20, 2021

CVE-2021-24609 on NVD →

Mapa Politico España < 3.7.0 - Stored Cross-Site Scripting

medium

The WP Mapa Politico Espana WordPress plugin before 3.7.0 does not sanitise or escape some of its settings before outputting them in attributes, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed

CVSS:
5.5
Affected:
up to 3.7.0
Fixed in:
3.7.0
Disclosed:
Aug 5, 2021

CVE-2021-24609 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database