pathomation

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

pathomation records in CISA KEV

No pathomation vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2024-35161 CVE-2024-52490 · GHSA-wv9c-gm3f-587q

WordPress Pathomation plugin <= 2.5.1 - Arbitrary File Upload vulnerability

MEDIUM 50

Unrestricted Upload of File with Dangerous Type vulnerability in pathomation Pathomation pathomation allows Upload a Web Shell to a Web Server.This issue affects Pathomation: from n/a through <= 2.5.1.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00574 Published 2024-11-28 No fix listed CWE-434

TI-2025-20153 CVE-2025-27306 · GHSA-qm52-xrp7-84q5

WordPress Pathomation plugin <= 2.5.1 - Stored Cross Site Scripting (XSS) vulnerability

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in pathomation Pathomation pathomation allows Stored XSS.This issue affects Pathomation: from n/a through <= 2.5.1.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00271 Published 2025-02-24 No fix listed CWE-79

Open these records in search →

Critical	1
High	0
Medium	1
Low	0
No CVSS	0