critical9.1

CVE-2025-48100

Improper Control of Generation of Code ('Code Injection') vulnerability in extremeidea bidorbuy Store Integrator bidorbuystoreintegrator allows Remote Code Inc…

Impact

Improper Control of Generation of Code ('Code Injection') vulnerability in extremeidea bidorbuy Store Integrator bidorbuystoreintegrator allows Remote Code Inclusion.This issue affects bidorbuy Store Integrator: from n/a through <= 2.12.0.

Affected products

Product	Affected versions
Bidorbuy Store Integrator: From N/A Through	through 2.12.0.

Versions were read from the advisory text. No structured product data has been published for this record yet.

Weakness classification

CWE-94

References

NVD record
CVE.org record
https://patchstack.com/database/Wordpress/Plugin/bidorbuystoreintegrator/vulnerability/wordpress-bidorbuy-store-integrator-plugin-2-10-0-remote-code-execution-rce-vulnerability?_s_id=cve