CVE-2025-48259

CVE-2025-48259 describes a Cross-Site Request Forgery (CSRF) in the WordPress plugin WP Mapa Politico España . Affected: WordPress sites running this plugin up to version 3.8.0 . The vulnerability allows CSRF to change settings, with the CVE notes and PatchStack entry confirming a CSRF-to-Setting...

PT-2024-37661 · WordPress · Inline Related Posts

Name of the Vulnerable Software and Affected Versions: Inline Related Posts WordPress plugin versions prior to 3.8.0 Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks. This can occur even when the unfiltered html capability is...