Textpattern vulnerabilities

Products

• Textpattern 30
• Cms 4

Newest

• textpattern cms TextPattern CMS 4.9.0-dev Authenticated Remote Code Execution via Plugin Upload CVE-2021-47976 8.7 HighMay 16, 2026
• textpattern cms TextPattern CMS 4.8.7 Remote Code Execution via File Upload CVE-2021-47943 8.7 HighMay 10, 2026
• textpattern Textpattern CMS 4.9.0 contains a Broken Access Control vulnerability in the article management... CVE-2026-30452 6.5 MediumApril 21, 2026
• textpattern, textpattern cms +1 more Textpattern CMS 4.9.0: Second-Order XSS via Atom Feed Injection CVE-2026-32986 5.1 MediumMarch 20, 2026
• textpattern, textpattern cms, tmrswrr textpattern cms +2 more Textpattern CMS 4.8.8 Authenticated Stored Cross-Site Scripting via Article Excerpt CVE-2023-53911 5.1 MediumDecember 17, 2025
• textpattern There is an arbitrary file upload vulnerability in the background of textpattern cms v4.8.8,... CVE-2023-50038 8.8 HighDecember 28, 2023
• textpattern Directory Traversal vulnerability in Textpattern CMS v4.8.8 allows a remote authenticated... CVE-2023-36220 7.2 HighAugust 7, 2023
• textpattern An arbitrary file upload vulnerability in the plugin upload function of Textpattern v4.8.8 allows... CVE-2023-24269 8.8 HighApril 28, 2023
• textpattern An arbitrary file upload vulnerability in the upload plugin of Textpattern v4.8.8 and below... CVE-2023-26852 Public exploit 7.2 HighApril 12, 2023
• textpattern Textpattern CMS v4.8.7 and older vulnerability exists through Sensitive Cookie in HTTPS Session... CVE-2021-40642 4.3 MediumJune 29, 2022
• textpattern Textpattern 4.8.7 is affected by a HTML injection vulnerability through “Content>Write>Body”. CVE-2021-40658 4.8 MediumJune 14, 2022
• textpattern textpattern 4.8.7 is vulnerable to Cross Site Scripting (XSS) via /textpattern/index.php,Body. A... CVE-2021-44082 8.3 HighMarch 29, 2022
• textpattern A persistent cross-site scripting vulnerability was discovered in the Excerpt parameter in... CVE-2021-28002 5.4 MediumAugust 19, 2021
• textpattern A cross-site scripting vulnerability was discovered in the Comments parameter in Textpattern CMS... CVE-2021-28001 5.4 MediumAugust 19, 2021
• textpattern Cross Site Scripting (XSS) vulnerability in Textpattern CMS 4.8.1 via Custom fields in the Menu... CVE-2020-23239 4.8 MediumJuly 26, 2021
• textpattern Textpattern 4.7.3 contains an aribtrary file load via the file_insert function in include... CVE-2020-19510 9.8 CriticalJune 21, 2021
• textpattern Textpattern V4.8.4 contains an arbitrary file upload vulnerability where a plug-in can be loaded... CVE-2021-30209 6.5 MediumApril 15, 2021
• textpattern Textpattern 4.8.4 is affected by cross-site scripting (XSS) in the Body parameter. CVE-2020-35854 4.8 MediumJanuary 25, 2021
• textpattern Textpattern CMS 4.6.2 allows CSRF via the prefs subsystem. CVE-2020-29458 8.8 HighDecember 2, 2020
• textpattern In Textpattern 4.5.7, the password-reset feature does not securely tether a hash to a user account. CVE-2015-8033 5.3 MediumAugust 14, 2020
• textpattern In Textpattern 4.5.7, an unprivileged author can change an article's markup setting. CVE-2015-8032 5.3 MediumAugust 14, 2020
• textpattern An issue was discovered in Textpattern CMS 4.6.2 and earlier. It is possible to inject SQL code... CVE-2018-7474 Public exploit 9.8 CriticalMarch 14, 2018
• textpattern textpattern version version 4.6.2 contains a XML Injection vulnerability in Import XML feature... CVE-2018-1000090 7.5 HighMarch 13, 2018
• textpattern Cross-site scripting (XSS) vulnerability in Textpattern CMS before 4.5.7 allows remote attackers... CVE-2014-4737 4.3 MediumOctober 10, 2014
• textpattern Cross-site scripting (XSS) vulnerability in setup/index.php in Textpattern CMS 4.4.1, when the... CVE-2011-5019 Public exploit 4.3 MediumJanuary 5, 2012
• textpattern Textpattern 4.2.0 allows remote attackers to obtain sensitive information via a direct request to... CVE-2011-3807 5.0 MediumSeptember 24, 2011
• textpattern PHP remote file inclusion vulnerability in index.php in Textpattern CMS 4.2.0 allows remote... CVE-2010-3205 Public exploit 7.5 HighSeptember 3, 2010
• textpattern Cross-site scripting (XSS) vulnerability in textarea/index.php in Textpattern (aka Txp CMS) 4.0.6... CVE-2008-5757 3.5 LowDecember 30, 2008
• textpattern Textpattern (aka Txp CMS) 4.0.5 does not ask for the old password during a password reset, which... CVE-2008-5670 6.8 MediumDecember 18, 2008
• textpattern index.php in the comments preview section in Textpattern (aka Txp CMS) 4.0.5 allows remote... CVE-2008-5669 5.0 MediumDecember 18, 2008
• textpattern Multiple cross-site scripting (XSS) vulnerabilities in Textpattern (aka Txp CMS) 4.0.5 allow... CVE-2008-5668 4.3 MediumDecember 18, 2008
• textpattern PHP remote file inclusion vulnerability in publish.php in Textpattern 1.19, when register_globals... CVE-2006-5615 Public exploit 7.5 HighOctober 31, 2006