devsmip

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

devsmip records in CISA KEV

No devsmip vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2025-11038 CVE-2025-12039 · GHSA-2fx7-q8g7-wxwg

BigBuy Dropshipping Connector for WooCommerce <= 2.0.5 - Unauthenticated IP Spoofing to phpinfo() Exposure

LOW 30

The BigBuy Dropshipping Connector for WooCommerce plugin for WordPress is vulnerable to IP Address Spoofing in all versions up to, and including, 2.0.5 due to insufficient IP address validation and use of user-supplied H…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00305 Published 2025-11-21 No fix listed CWE-200

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0