Textpattern vulnerabilities
We track 3 vulnerabilities in Textpattern products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on August 7, 2023.
3vulnerabilities
0critical
3high
0exploited
7.7average CVSS score
Latest Textpattern vulnerabilities
- 7.2 High severity
Textpattern: Improper Limitation of a Pathname to a Restricted Directory
Directory Traversal vulnerability in Textpattern CMS v4.8.8 allows a remote authenticated attacker to execute arbitrary code and gain access to sensitive information via the plugin Upload function.
- 8.8 High severity
Textpattern: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload vulnerability in the plugin upload function of Textpattern v4.8.8 allows attackers to execute arbitrary code via a crafted Zip file.
- 7.2 High severity
Textpattern: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload vulnerability in the upload plugin of Textpattern v4.8.8 and below allows attackers to execute arbitrary code by uploading a crafted PHP file.