CVE-2021-4428

Name of the Vulnerable Software and Affected Versions what3words Autosuggest Plugin versions up to 4.0.0

Description A vulnerability has been found in the what3words Autosuggest Plugin, classified as problematic. The issue affects the enqueue scripts function of the file w3w-autosuggest/public/class-w3w-autosuggest-public.php of the component Setting Handler, leading to information disclosure. The attack can be launched remotely.

Recommendations For what3words Autosuggest Plugin versions up to 4.0.0, upgrade to version 4.0.1 to address this issue. As a temporary workaround, consider disabling the enqueue scripts function until the patch is applied. Restrict access to the vulnerable component Setting Handler to minimize the risk of exploitation.