Full Path Disclosure Vulnerability in BigBuy Dropshipping Connector for WooCommerce

CVE-2024-13538

Summary

The BigBuy Dropshipping Connector for WooCommerce plugin for WordPress is susceptible to Full Path Disclosure due to misconfigurations in the /vendor/cocur/slugify/bin/generate-default.php file, allowing unauthenticated users to access sensitive path information of the web application. While the information retrieved is not inherently harmful, it could be exploited in conjunction with other vulnerabilities to facilitate unauthorized access to the affected server or application.

References