Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

1 record

Vendor: devsmip Clear all filters
TI-2025-11038 CVE-2025-12039 · GHSA-2fx7-q8g7-wxwg

BigBuy Dropshipping Connector for WooCommerce <= 2.0.5 - Unauthenticated IP Spoofing to phpinfo() Exposure

Priority LOW 30

The BigBuy Dropshipping Connector for WooCommerce plugin for WordPress is vulnerable to IP Address Spoofing in all versions up to, and including, 2.0.5 due to insufficient IP address validation and use of user-supplied H…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00305 Published 2025-11-21 No fix listed CWE-200