Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
what3words records in CISA KEVNo what3words vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 49
A vulnerability has been found in what3words Autosuggest Plugin up to 4.0.0 on WordPress and classified as problematic.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.15808 · Published 2023-07-18 · No fix listed CWE-200
Priority LOW 30
Cross-Site Request Forgery (CSRF) vulnerability in what3words what3words Address Field 3-word-address-validation-field allows Stored XSS.This issue affects what3words Address Field: from n/a through <= 4.0.15.
CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.00146 · Published 2025-02-16 · No fix listed CWE-352
