CVE-2025-48077

Name of the Vulnerable Software and Affected Versions Block Country versions prior to 1.1

Description A Cross-Site Request Forgery (CSRF) issue exists due to missing or incorrect nonce validation (a unique token used to prevent forged requests) on a function. This allows unauthenticated attackers to perform unauthorized actions by tricking a site administrator into clicking a malicious link. Additionally, the plugin is susceptible to Stored Cross-Site Scripting (XSS), which allows the injection of malicious scripts that are stored on the server.

Recommendations Update to a version later than 1.0.