Vulnerability Description
A vulnerability has been found in what3words Autosuggest Plugin up to 4.0.0 on WordPress and classified as problematic. Affected by this vulnerability is the function enqueue_scripts of the file w3w-autosuggest/public/class-w3w-autosuggest-public.php of the component Setting Handler. The manipulation leads to information disclosure. The attack can be launched remotely. Upgrading to version 4.0.1 is able to address this issue. The patch is named dd59cbac5f86057d6a73b87007c08b8bfa0c32ac. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-234247.
CVSS Score
LOW
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| What3Words | Autosuggest | < 4.0.1 |
Related Weaknesses (CWE)
References
- https://github.com/what3words/wordpress-autosuggest-plugin/commit/dd59cbac5f8605Patch
- https://github.com/what3words/wordpress-autosuggest-plugin/pull/20PatchVendor Advisory
- https://github.com/what3words/wordpress-autosuggest-plugin/releases/tag/v4.0.1Release Notes
- https://vuldb.com/?ctiid.234247Permissions Required
- https://vuldb.com/?id.234247Permissions Required
- https://github.com/what3words/wordpress-autosuggest-plugin/commit/dd59cbac5f8605Patch
- https://github.com/what3words/wordpress-autosuggest-plugin/pull/20PatchVendor Advisory
- https://github.com/what3words/wordpress-autosuggest-plugin/releases/tag/v4.0.1Release Notes
- https://vuldb.com/?ctiid.234247Permissions Required
- https://vuldb.com/?id.234247Permissions Required
FAQ
What is CVE-2021-4428?
CVE-2021-4428 is a vulnerability with a CVSS score of 2.7 (LOW). A vulnerability has been found in what3words Autosuggest Plugin up to 4.0.0 on WordPress and classified as problematic. Affected by this vulnerability is the function enqueue_scripts of the file w3w-a...
How severe is CVE-2021-4428?
CVE-2021-4428 has been rated LOW with a CVSS base score of 2.7/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-4428?
Check the references section above for vendor advisories and patch information. Affected products include: What3Words Autosuggest.