PT-2025-13446

Name of the Vulnerable Software and Affected Versions The Booking for Appointments and Events Calendar – Amelia plugin for WordPress versions up to, and including, 1.2.19 Description The issue allows unauthenticated attackers to retrieve the full path of the web application, which can aid other...

WordPress plugin Booking for Appointments and Events Calendar Amelia 信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. An information disclosure...

CVE-2025-2578: Exposure of Sensitive Information to an Unauthorized Actor

The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.2.19 via the 'wpAmeliaApiCall' function. This makes it possible for unauthenticated attackers to retrieve the full path of the web...