Search vulnerabilities

Results 2

Export CSV
CVE-2025-27306

WordPress Pathomation plugin <= 2.5.1 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in pathomation Pathomation pathomation allows Stored XSS.This issue affects Pathomation: from n/a through <= 2.5.1.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
CVE-2024-52490

WordPress Pathomation plugin <= 2.5.1 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in pathomation Pathomation pathomation allows Upload a Web Shell to a Web Server.This issue affects Pathomation: from n/a through <= 2.5.1.

CVSS 3.1 · 10 Critical EPSS < 1% KEV · Not listed
Vendors
Products