Full Path Disclosure Vulnerability in Amelia Plugin for WordPress

CVE-2025-2578

What is CVE-2025-2578?

The Amelia plugin for WordPress is susceptible to a Full Path Disclosure vulnerability via the 'wpAmeliaApiCall' function. This flaw allows unauthenticated attackers to obtain the complete path of the web application, which could potentially aid in launching further attacks. Although the disclosed information alone isn't detrimental, its presence can facilitate exploitation if combined with another vulnerability present in the system. Users are advised to review their installation and implement necessary security updates to mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References