Full Path Disclosure Vulnerability in Amelia Plugin for WordPress

CVE-2025-2578

What is CVE-2025-2578?

The Amelia plugin for WordPress is susceptible to a Full Path Disclosure vulnerability via the 'wpAmeliaApiCall' function. This flaw allows unauthenticated attackers to obtain the complete path of the web application, which could potentially aid in launching further attacks. Although the disclosed information alone isn't detrimental, its presence can facilitate exploitation if combined with another vulnerability present in the system. Users are advised to review their installation and implement necessary security updates to mitigate this risk.

References