CyberSecBulletin

What3words vulnerabilities

We track 1 vulnerability in What3words products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on February 16, 2025.

1vulnerabilities
0critical
1high
0exploited
7.1average CVSS score

Latest What3words vulnerabilities

  • 7.1 High severity

    what3words Address Field: Cross-Site Request Forgery

    CVE-2025-26768What3words

    Cross-Site Request Forgery (CSRF) vulnerability in what3words what3words Address Field 3-word-address-validation-field allows Stored XSS.This issue affects what3words Address Field: from n/a through <= 4.0.15.