Threats tagged 'ghsa-2fx7-q8g7-wxwg'

The BigBuy Dropshipping Connector for WooCommerce plugin for WordPress contains an IP address spoofing vulnerability in all versions up to and including 2.0.5. This flaw arises from insufficient validation of IP addresses and reliance on user-supplied HTTP headers for IP retrieval. Exploitation allows unauthenticated attackers to access the output of phpinfo(), potentially disclosing sensitive server configuration information.