Textpattern vulnerabilities

3 known vulnerabilities in Textpattern from Textpattern. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  Textpattern: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2023-36220Aug 7, 2023TextpatternEPSS 3.39%

  Directory Traversal vulnerability in Textpattern CMS v4.8.8 allows a remote authenticated attacker to execute arbitrary code and gain access to sensitive information via the plugin Upload function.

• 8.8 High severity

  Textpattern: Unrestricted Upload of File with Dangerous Type

  CVE-2023-24269Apr 28, 2023TextpatternEPSS 1.11%

  An arbitrary file upload vulnerability in the plugin upload function of Textpattern v4.8.8 allows attackers to execute arbitrary code via a crafted Zip file.

• 7.2 High severity

  Textpattern: Unrestricted Upload of File with Dangerous Type

  CVE-2023-26852Apr 12, 2023TextpatternEPSS 1.99%

  An arbitrary file upload vulnerability in the upload plugin of Textpattern v4.8.8 and below allows attackers to execute arbitrary code by uploading a crafted PHP file.