IP Address Spoofing Vulnerability in BigBuy Dropshipping Connector for WooCommerce

CVE-2025-12039

What is CVE-2025-12039?

The BigBuy Dropshipping Connector for WooCommerce plugin for WordPress is susceptible to IP address spoofing due to inadequate validation of IP addresses and the reliance on user-supplied HTTP headers for IP retrieval. This vulnerability permits attackers without authentication to exploit the system, potentially exposing sensitive data such as the output of the phpinfo() function.

References