CVE-2021-4428

🗓️ 18 Jul 2023 17:00:04Reported by VulDBType

cve🔗 web.nvd.nist.gov👁 103 Views🌐 WEB

Vulnerability in what3words Autosuggest Plugin up to 4.0.0 on WordPress, leading to information disclosure

Reporter	Title	Published	Views	Family All 15
IBM Security Bulletins	Security Bulletin: Vulnerability in Apache Log4j (CVE-2021-44228) affects IBM Spectrum Fusion HCI which includes IBM Spectrum Scale Container Native Storage Access and IBM Spectrum Protect Plus	17 Jan 202216:44	–	ibm
Gitee	Exploit for Deserialization of Untrusted Data in Siemens 6Bk1602-0Aa12-0Tp0_Firmware	12 Dec 202121:05	–	gitee
GithubExploit	Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware	17 Dec 202106:34	–	githubexploit
Circl	CVE-2021-4428	17 Dec 202106:39	–	circl
CNNVD	WordPress Plugin What3words Autosuggest 信息泄露漏洞	18 Jul 202300:00	–	cnnvd
Cvelist	CVE-2021-4428 what3words Autosuggest Plugin Setting class-w3w-autosuggest-public.php enqueue_scripts information disclosure	18 Jul 202317:00	–	cvelist
Microsoft Malware Protection	Guidance for preventing, detecting, and hunting for exploitation of the Log4j 2 vulnerability	12 Dec 202105:29	–	mmpc
Microsoft Secure	Guidance for preventing, detecting, and hunting for exploitation of the Log4j 2 vulnerability	12 Dec 202105:29	–	mssecure
NVD	CVE-2021-4428	18 Jul 202317:15	–	nvd
Patchstack	WordPress what3words Address Field Plugin <= 4.0.0 is vulnerable to Sensitive Data Exposure	24 Jul 202300:00	–	patchstack

NVD

Vulners

Node

what3words autosuggestRange<4.0.1wordpress

[
  {
    "vendor": "what3words",
    "product": "Autosuggest Plugin",
    "versions": [
      {
        "version": "4.0",
        "status": "affected"
      }
    ],
    "modules": [
      "Setting Handler"
    ]
  }
]

Source	Link
github	www.github.com/what3words/wordpress-autosuggest-plugin/pull/20
github	www.github.com/what3words/wordpress-autosuggest-plugin/releases/tag/v4.0.1
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
github	www.github.com/what3words/wordpress-autosuggest-plugin/commit/dd59cbac5f86057d6a73b87007c08b8bfa0c32ac

Parameter	Position	Path	Description	CWE
Log4jRCE	nested	127.0.0.1:8888/#Log4jRCE	Log4j2 JNDI-based PoC server URL referenced in the document (CVE-2021-44228 PoC).	CWE-200

17 Jun 2026 04:19Current

5.3Medium risk

Vulners AI Score5.3

CVSS 3.12.7 - 7.5

CVSS 23.3

CVSS 32.7

EPSS0.15808

CWE-200