CVE-2021-4428 what3words Autosuggest Plugin Setting class-w3w-autosuggest-public.php enqueue_scripts information disclosure

🗓️ 18 Jul 2023 17:00:04Reported by VulDBType

Vulnerability in what3words Autosuggest Plugin Setting class-w3w-autosuggest-public.ph

Reporter	Title	Published	Views	Family All 15
IBM Security Bulletins	Security Bulletin: Vulnerability in Apache Log4j (CVE-2021-44228) affects IBM Spectrum Fusion HCI which includes IBM Spectrum Scale Container Native Storage Access and IBM Spectrum Protect Plus	17 Jan 202216:44	–	ibm
Gitee	Exploit for Deserialization of Untrusted Data in Siemens 6Bk1602-0Aa12-0Tp0_Firmware	12 Dec 202121:05	–	gitee
GithubExploit	Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware	17 Dec 202106:34	–	githubexploit
Circl	CVE-2021-4428	17 Dec 202106:39	–	circl
CNNVD	WordPress Plugin What3words Autosuggest 信息泄露漏洞	18 Jul 202300:00	–	cnnvd
CVE	CVE-2021-4428	18 Jul 202317:00	–	cve
Microsoft Malware Protection	Guidance for preventing, detecting, and hunting for exploitation of the Log4j 2 vulnerability	12 Dec 202105:29	–	mmpc
Microsoft Secure	Guidance for preventing, detecting, and hunting for exploitation of the Log4j 2 vulnerability	12 Dec 202105:29	–	mssecure
NVD	CVE-2021-4428	18 Jul 202317:15	–	nvd
Patchstack	WordPress what3words Address Field Plugin <= 4.0.0 is vulnerable to Sensitive Data Exposure	24 Jul 202300:00	–	patchstack

[
  {
    "vendor": "what3words",
    "product": "Autosuggest Plugin",
    "versions": [
      {
        "version": "4.0",
        "status": "affected"
      }
    ],
    "modules": [
      "Setting Handler"
    ]
  }
]

Source	Link
github	www.github.com/what3words/wordpress-autosuggest-plugin/pull/20
github	www.github.com/what3words/wordpress-autosuggest-plugin/releases/tag/v4.0.1
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
github	www.github.com/what3words/wordpress-autosuggest-plugin/commit/dd59cbac5f86057d6a73b87007c08b8bfa0c32ac

20 Oct 2023 13:57Current

7.6High risk

Vulners AI Score7.6

CVSS 3.12.7

CVSS 32.7

CVSS 23.3

EPSS0.15808

CWE-200