CVE-2024-6552 is a vulnerability in the Amelia Booking plugin for WordPress that causes full path disclosure due to enabled display_errors in Symfony test files. This allows unauthenticated attackers to obtain the full path of the web application. The information leak is classified under CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor). The vulnerability affects all versions up to and including 1.2. The disclosed path information by itself does not lead to direct compromise but may facilitate other attacks if combined with additional vulnerabilities.

The vulnerability exposes the full filesystem path of the affected web application to unauthenticated attackers. This information disclosure is limited in impact as it does not directly compromise confidentiality, integrity, or availability. However, it can aid attackers in reconnaissance and in exploiting other vulnerabilities. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider disabling display_errors in the plugin's test files or avoid using affected versions. Monitor the vendor's communications for updates and apply patches promptly once released.