BigBuy Dropshipping Connector for WooCommerce, CVE-2025-12039

CVE, Research URL: CVE-2025-12039
Home page URL: Security reports for BigBuy Dropshipping Connector for WooCommerce
Application: BigBuy Dropshipping Connector for WooCommerce
Published on: Nov 21, 2025
Research Description: The BigBuy Dropshipping Connector for WooCommerce plugin for WordPress is vulnerable to IP Address Spoofing in all versions up to, and including, 2.0.5 due to insufficient IP address validation and use of user-supplied HTTP headers as a primary method for IP retrieval. This makes it possible for unauthenticated attackers to retrieve the output of phpinfo().
Affected versions: max 2.0.5.
Status: vulnerable