Full Path Disclosure Vulnerability in BigBuy Dropshipping Connector for WooCommerce

CVE-2024-13538

What is CVE-2024-13538?

The BigBuy Dropshipping Connector for WooCommerce plugin for WordPress is susceptible to Full Path Disclosure due to misconfigurations in the /vendor/cocur/slugify/bin/generate-default.php file, allowing unauthenticated users to access sensitive path information of the web application. While the information retrieved is not inherently harmful, it could be exploited in conjunction with other vulnerabilities to facilitate unauthorized access to the affected server or application.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References