Birth Chart Compatibility WordPress Plugin 2.0 · Full Path Disclosure
Source Exploit-DB RSS Feed
Rated by Threat Radar
Data as of 23 Nov 2025, 23:47 UTC
What to do
AI-suggested
European organizations should immediately audit their WordPress installations to identify the presence of the Birth Chart Compatibility Plugin version 2.0. If found, they should remove or disable the plugin until a patch is available. Restricting access to error messages and sensitive files via web server configuration (e.g., disabling detailed error reporting in production environments) can reduce information leakage. Implementing Web Application Firewalls (WAFs) with rules to detect and block attempts to exploit path disclosure vulnerabilities can provide an additional layer of defense. Regularly monitoring web server logs for unusual requests or error patterns can help detect exploitation attempts early. Organizations should also ensure that WordPress core and all plugins are kept up to date and consider using security plugins that limit information disclosure. Finally, conducting security awareness training for web administrators about the risks of verbose error messages and insecure plugin usage is recommended.
Description
Birth Chart Compatibility WordPress Plugin 2.0 - Full Path Disclosure
Indicators of compromise
Exploit source code
/*
* Exploit Title : Birth Chart Compatibility WordPress Plugin 2.0 - Full Path Disclosure
* Author : Byte Reaper
* Telegram : @ByteReaper0
* CVE : CVE-2025-6082
* Software Link : https://frp.wordpress.org/plugins/birth-chart-compatibility/
* Description : Proof‑of‑Concept exploits the Full Path Disclosure bug in the
* “Birth Chart Compatibility” WordPress plugin (<=v2.0). It sends
* an HTTP GET request to the plugin’s index.php endpoint,…