PT-2025-30385 · WordPress · Birth Chart Compatibility

Amin Beheshti · Published 2025-07-22 · Updated 2025-07-22 · CVE-2025-6082

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Birth Chart Compatibility plugin for WordPress versions prior to 2.1

Description The Birth Chart Compatibility plugin for WordPress is susceptible to full path disclosure due to insufficient protection against direct access to the plugin's index.php file. This allows unauthenticated attackers to retrieve the full path of the web application, potentially aiding in further attacks. The information disclosed is not directly damaging but can be used in conjunction with other vulnerabilities.

Recommendations Update the Birth Chart Compatibility plugin to version 2.1 or later.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2025-6082

Affected Products

Birth Chart Compatibility

References · 12

• 🔥 https://exploit-db.com/exploits/52419 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-6082 · Security Note
• https://t.me/CVEtracker/28361 · Telegram Post
• https://wordfence.com/threat-intel/vulnerabilities/id/4607dca0-d3b7-4fca-8f89-a0a739bd7551?source=cve · Note
• https://twitter.com/CVEnew/status/1947594458335219920 · Twitter Post
• https://t.me/cveNotify/129779 · Telegram Post
• https://wordpress.org/plugins/birth-chart-compatibility · Note
• https://t.me/cvenotify/129779 · Telegram Post
• https://twitter.com/byte_reaper/status/1947740362316849343 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1947614808687181827 · Twitter Post
• https://t.me/cvetracker/28361 · Telegram Post
• https://plugins.svn.wordpress.org/birth-chart-compatibility/trunk/index.php · Note