Full Path Disclosure Vulnerability in Birth Chart Compatibility Plugin for WordPress
CVE-2025-6082
What is CVE-2025-6082?
The Birth Chart Compatibility plugin for WordPress suffers from a Full Path Disclosure vulnerability in all versions up to and including 2.0. This vulnerability arises from inadequate measures to prevent direct access to the plugin's index.php file, which can trigger an error and expose the complete file path of the web application to unauthenticated attackers. While the exposed information alone may not be harmful, it can serve as a stepping stone for more sophisticated attacks if combined with other vulnerabilities.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Birth Chart Compatibility * <= 2.0
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved