CVE-2024-13538

creationtimestamp| type| source ---|---|--- 2025-02-18 05:16:09+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ligiylb65m2y 2025-02-18 11:39:00+00:00| seen| Telegram/v5j2Oi8bf63BSycY8wX7bbQsHOvSVKMDabfdBO8OMKSRIETk...

CVE-2024-13538 BigBuy Dropshipping Connector for WooCommerce <= 2.0.0 - Unauthenticated Full Path Disclosute

The BigBuy Dropshipping Connector for WooCommerce plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 2.0.0. This is due the /vendor/cocur/slugify/bin/generate-default.php file being directly accessible and triggering an error. This makes it possible f...

CVE-2024-13538

CVE-2024-13538 affects the BigBuy Dropshipping Connector for WooCommerce (WordPress) up to version 1.9.19. The vulnerability is a Full Path Disclosure due to direct access to the /vendor/cocur/slugify/bin/generate-default.php file, which allows unauthenticated attackers to retrieve the web applic...