The Textpattern Development Team
Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
The Textpattern Development Team records in CISA KEVNo The Textpattern Development Team vulnerabilities are listed in CISA KEV.
Priority HIGH 73
Textpattern versions prior to 4.8.3 contain an authenticated remote code execution vulnerability that allows logged-in users to upload malicious PHP files.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00715 · Published 2026-01-23 · No fix listed CWE-434
Open these records in search →