Remote Code Inclusion Vulnerability in extremeidea Bidorbuy Store Integrator
CVE-2025-48100

9.1CRITICAL

Key Information:

Vendor

WordPress
Status
Bidorbuy Store Integrator
Vendor
CVE Published:
28 August 2025

What is CVE-2025-48100?

The Bidorbuy Store Integrator developed by extremeidea exhibits a vulnerability that permits remote code inclusion due to improper handling of code generation. This flaw allows attackers to inject malicious code, potentially leading to unauthorized remote execution of commands on affected systems. The issue impacts all versions up to and including 2.12.0, making it critical for users to assess their systems and implement necessary security updates.

Affected Version(s)

bidorbuy Store Integrator <= 2.12.0

References

https://patchstack.com/database/wordpress/plugin/bidorbuy...
vdb-entry

CVSS V3.1

Score:
9.1
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

mcdruid (Patchstack Alliance)
.