The vulnerability CVE-2025-49449 is a CSRF issue in the WP Map Plugins Interactive Regional Map of Africa plugin (<= 1.0). It allows an attacker to induce an authenticated user to perform actions without their consent by exploiting the lack of proper request validation. The CVSS vector indicates the attack can be performed remotely without privileges, requires user interaction, and impacts integrity with no confidentiality or availability impact.

The impact is limited to integrity as the attacker can cause unauthorized actions via CSRF, but there is no direct confidentiality or availability impact. The medium severity reflects the potential for limited unauthorized changes within the context of an authenticated user session.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is available, users should consider implementing CSRF protections such as verifying nonces or tokens in requests if possible, or restricting access to trusted users. Monitor the vendor's communications for updates on fixes.