pathomation Vulnerabilities and Affected Products
Explore source-attributed vulnerabilities associated with pathomation products.
Products
- Pathomation2 vulnerabilities
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2025-27306MEDIUM | WordPress Pathomation plugin <= 2.5.1 - Stored Cross Site Scripting (XSS) vulnerabilityImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in pathomation Pathomation pathomation allows Stored XSS.This issue affects Pathomation: from n/a through <= 2.5.1. CWE-79Feb 24, 2025 | CVSS6.5v3.1 | EPSS0.262% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-52490CRITICAL | WordPress Pathomation plugin <= 2.5.1 - Arbitrary File Upload vulnerabilityUnrestricted Upload of File with Dangerous Type vulnerability in pathomation Pathomation pathomation allows Upload a Web Shell to a Web Server.This issue affects Pathomation: from n/a through <= 2.5.1. CWE-434Nov 28, 2024 | CVSS10.0v3.1 | EPSS0.562% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |