what3words
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Autosuggest Plugin | 1 | – | Jul 18, 2023 |
| what3words Address Field | 1 | – | Feb 16, 2025 |
Exploited and recent CVEs
- CVE-2025-26768 WordPress what3words Address Field plugin <= 4.0.15 - CSRF to Stored XSS vulnerability 0.1%
- CVE-2021-4428 what3words Autosuggest Plugin Setting class-w3w-autosuggest-public.php enqueue_scripts information disclosure 15.8%