Vulnerabilities > Textpattern > Critical

DATE CVE VULNERABILITY TITLE RISK
2021-06-21 CVE-2020-19510 Unrestricted Upload of File with Dangerous Type vulnerability in Textpattern 4.7.3
Textpattern 4.7.3 contains an aribtrary file load via the file_insert function in include/txp_file.php.
network
low complexity
textpattern CWE-434
critical
 9.8
9.8
2018-03-14 CVE-2018-7474 SQL Injection vulnerability in Textpattern
An issue was discovered in Textpattern CMS 4.6.2 and earlier.
network
low complexity
textpattern CWE-89
critical
 9.8
9.8