Vulnerabilities

TI-2025-20153 CVE-2025-27306 · GHSA-qm52-xrp7-84q5

WordPress Pathomation plugin <= 2.5.1 - Stored Cross Site Scripting (XSS) vulnerability

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in pathomation Pathomation pathomation allows Stored XSS.This issue affects Pathomation: from n/a through <= 2.5.1.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00271 Published 2025-02-24 No fix listed CWE-79

TI-2024-35161 CVE-2024-52490 · GHSA-wv9c-gm3f-587q

WordPress Pathomation plugin <= 2.5.1 - Arbitrary File Upload vulnerability

MEDIUM 50

Unrestricted Upload of File with Dangerous Type vulnerability in pathomation Pathomation pathomation allows Upload a Web Shell to a Web Server.This issue affects Pathomation: from n/a through <= 2.5.1.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00574 Published 2024-11-28 No fix listed CWE-434

Vulnerabilities

Filters

WordPress Pathomation plugin <= 2.5.1 - Stored Cross Site Scripting (XSS) vulnerability

WordPress Pathomation plugin <= 2.5.1 - Arbitrary File Upload vulnerability