EUVD-2025-8554

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Amelia plugin for WordPress is vulnerable to Full Path Disclosure, affecting versions up to 1.2.19.

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2025-2578	28 Mar 202508:27	–	circl
CNNVD	WordPress plugin Booking for Appointments and Events Calendar Amelia 信息泄露漏洞	28 Mar 202500:00	–	cnnvd
CVE	CVE-2025-2578	28 Mar 202507:33	–	cve
Cvelist	CVE-2025-2578 Booking for Appointments and Events Calendar – Amelia <= 1.2.19 - Unauthenticated Full Path Disclosure	28 Mar 202507:33	–	cvelist
NVD	CVE-2025-2578	28 Mar 202508:15	–	nvd
Patchstack	WordPress Booking for Appointments and Events Calendar – Amelia plugin <= 1.2.19 - Unauthenticated Full Path Disclosure vulnerability	27 Mar 202521:19	–	patchstack
RedhatCVE	CVE-2025-2578	30 Mar 202508:17	–	redhatcve
Vulnrichment	CVE-2025-2578 Booking for Appointments and Events Calendar – Amelia <= 1.2.19 - Unauthenticated Full Path Disclosure	28 Mar 202507:33	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (March 24, 2025 to March 30, 2025)	3 Apr 202515:20	–	wordfence

[
  {
    "enisaIdVendor": [
      {
        "id": "5e680932-07f1-359a-952e-d0b5e438f1fe",
        "vendor": {
          "name": "ameliabooking"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "bc126ddb-a701-3f6d-8a13-c99a5308cf36",
        "product": {
          "name": "Booking for Appointments and Events Calendar &#8211; Amelia"
        },
        "product_version": "* ≤1.2.19"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-2578
plugins	www.plugins.trac.wordpress.org/browser/ameliabooking/trunk/ameliabooking.php
plugins	www.plugins.trac.wordpress.org/browser/ameliabooking/trunk/src/Application/Commands/Entities/GetEntitiesCommandHandler.php
plugins	www.plugins.trac.wordpress.org/changeset/3261318
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/6806e07b-96bf-43ad-a3ac-2105e7449e3c
plugins	www.plugins.trac.wordpress.org/changeset/3261318/

03 Oct 2025 20:07Current

9High risk

Vulners AI Score9

CVSS 3.15.3

EPSS0.00299

SSVC