Extremeidea Bidorbuy Store Integrator Remote Code Execution Vulnerability

A code injection vulnerability allowing remote code execution has been identified in the Extremeidea Bidorbuy Store Integrator WordPress plugin, affecting versions through 2.12.0. This vulnerability arises from improper control over code generation, leading to remote code inclusion.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected website, potentially leading to unauthorized access and full control over the site.

Remediation

Users are advised to remove and replace the Bidorbuy Store Integrator plugin, as it is likely abandoned and will not receive further updates or fixes. Deactivating the plugin does not eliminate the security risk unless a virtual patch is applied.