CVE-2025-48259 is a CSRF vulnerability in the WP Mapa Politico España WordPress plugin (versions up to 3.8.0). The vulnerability allows an attacker to trick authenticated users into submitting unwanted requests, potentially leading to limited integrity impact. The CVSS vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality or availability impact, and low integrity impact.

Successful exploitation could lead to unauthorized actions performed by authenticated users without their consent, affecting the integrity of the affected system. There is no confidentiality or availability impact reported. No known exploits are currently in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should consider applying standard CSRF mitigations such as disabling or restricting the plugin if feasible, or limiting user privileges to reduce risk.