CVE-2021-4428

A vulnerability has been found in what3words Autosuggest Plugin up to 4.0.0 on WordPress and classified as problematic. Affected by this vulnerability is the function enqueue_scripts of the file w3w-autosuggest/public/class-w3w-autosuggest-public.php of the component Setting Handler. The manipulation leads to information disclosure. The attack can be launched remotely. Upgrading to version 4.0.1 is able to address this issue. The patch is named dd59cbac5f86057d6a73b87007c08b8bfa0c32ac. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-234247.

• CWE-200

• https://github.com/what3words/wordpress-autosuggest-plugin/commit/dd59cbac5f86057d6a73b87007c08b8bfa0c32acPatch
• https://github.com/what3words/wordpress-autosuggest-plugin/pull/20Patch, Vendor Advisory
• https://github.com/what3words/wordpress-autosuggest-plugin/releases/tag/v4.0.1Release Notes
• https://vuldb.com/?ctiid.234247Permissions Required
• https://vuldb.com/?id.234247Permissions Required
• https://github.com/what3words/wordpress-autosuggest-plugin/commit/dd59cbac5f86057d6a73b87007c08b8bfa0c32acPatch
• https://github.com/what3words/wordpress-autosuggest-plugin/pull/20Patch, Vendor Advisory
• https://github.com/what3words/wordpress-autosuggest-plugin/releases/tag/v4.0.1Release Notes
• https://vuldb.com/?ctiid.234247Permissions Required
• https://vuldb.com/?id.234247Permissions Required

Published

Jul 18, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-44269An out of bounds read was found in Wavpack 5.4.0 in processi…5.5
• CVE-2021-4427The Vuukle Comments, Reactions, Share Bar, Revenue plugin fo…4.3
• CVE-2021-44273e2guardian v5.4.x <= v5.4.3r is affected by missing SSL cert…7.4
• CVE-2021-44277Librenms 21.11.0 is affected by a Cross Site Scripting (XSS)…6.1
• CVE-2021-44278Librenms 21.11.0 is affected by a path manipulation vulnerab…9.8
• CVE-2021-44279Librenms 21.11.0 is affected by a Cross Site Scripting (XSS)…6.1
• CVE-2021-44280attendance management system 1.0 is affected by a SQL inject…9.8
• CVE-2021-44283A buffer overflow in the component /Enclave.cpp of Electroni…7.5
• CVE-2021-44299A reflected cross-site scripting (XSS) vulnerability in \lib…5.4
• CVE-2021-4430A vulnerability classified as problematic has been found in …7.5
• CVE-2021-44302BaiCloud-cms v2.5.7 was discovered to contain multiple SQL i…8.8
• CVE-2021-4431A vulnerability classified as problematic has been found in …6.1