Skip to content
OpenAdvisories

Vendor

devsmip

2 known vulnerabilities.

Products

BigBuy Dropshipping Connector for WooCommerce 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2025-12039

    BigBuy Dropshipping Connector for WooCommerce <= 2.0.5 - Unauthenticated IP Spoofing to phpinfo() Exposure

    The BigBuy Dropshipping Connector for WooCommerce plugin for WordPress is vulnerable to IP Address Spoofing in all versions up to, and including, 2.0.5 due to insufficient IP address validation and use of user-supplied HTTP headers as a primary method for IP …

    devsmip BigBuy Dropshipping Connector for WooCommerce Web / CMS
  • Medium 5.3
    CVE-2024-13538

    BigBuy Dropshipping Connector for WooCommerce <= 2.0.0 - Unauthenticated Full Path Disclosute

    The BigBuy Dropshipping Connector for WooCommerce plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 2.0.0. This is due the /vendor/cocur/slugify/bin/generate-default.php file being directly accessible and trigger…

    devsmip BigBuy Dropshipping Connector for WooCommerce Web / CMS