Bigbuy

bigbuy

1 CVE • 1 product

Products (1)

Click to collapse

Toggle

Dropshipping Connector For Woocommerce

dropshipping_connector_for_woocommerce

1 CVE

CVEs (1)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-13538 1Bigbuy 1Dropshipping Connector For Woocommerce Jun 17, 2026 Feb 18, 2025 N/A· v4 5.3 MEDIUM· v3 N/A· v2 The BigBuy Dropshipping Connector for WooCommerce plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 2.0.0. This is due the /vendor/cocur/slugify/bin/generate-default.php fil...Show more The BigBuy Dropshipping Connector for WooCommerce plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 2.0.0. This is due the /vendor/cocur/slugify/bin/generate-default.php file being directly accessible and triggering an error. This makes it possible for unauthenticated attackers to retrieve the full path of the web application, which can be used to aid other attacks. The information displayed is not useful on its own, and requires another vulnerability to be present for damage to an affected website.Show less

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2024-13538

1Bigbuy

1Dropshipping Connector For Woocommerce

Jun 17, 2026

Feb 18, 2025

N/A· v4

5.3 MEDIUM· v3

N/A· v2

The BigBuy Dropshipping Connector for WooCommerce plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 2.0.0. This is due the /vendor/cocur/slugify/bin/generate-default.php file being directly accessible and triggering an error. This makes it possible for unauthenticated attackers to retrieve the full path of the web application, which can be used to aid other attacks. The information displayed is not useful on its own, and requires another vulnerability to be present for damage to an affected website.Show less