Sploitus

15 exploited vulnerabilities in Textpattern Cms

Vulnerabilities with publicly known exploits

Vendors
Textpattern, Unknown
With known exploits
15
Affected Textpattern versions
≤ 4.6.2, 4.2.0, 4.5.5, 4.5.0, 4.5.1, 4.5.2, 4.5.3, 4.5.4, 4.4.1

Vulnerabilities with exploits

Highest CVSS first — 4 of these already have exploit code on Sploitus

CVE-2018-7474 4 exploits
CVSS 9.8 CRITICAL 2018-03-14FIX AVAILABLE
Textpattern 4.6.2 SQL InjectionTextPattern 4.6.2 - qty SQL Injection Vulnerability
CVE-2021-47976
CVSS 8.8 HIGH 2026-05-16
CVE-2021-47943
CVSS 8.8 HIGH 2026-05-10
CVE-2023-50038
CVSS 8.8 HIGH 2023-12-27FIX AVAILABLE
CVE-2020-29458
CVSS 8.8 HIGH 2020-12-02
CVE-2010-3205 1 exploit
CVSS 7.5 HIGH 2010-09-03FIX AVAILABLE
textpattern CMS 4.2.0 - Remote File Inclusion
CVE-2023-36220
CVSS 7.2 HIGH 2023-08-07FIX AVAILABLE
CVE-2026-30452
CVSS 6.5 MEDIUM 2026-04-21
CVE-2026-32986
CVSS 6.1 MEDIUM 2026-03-20FIX AVAILABLE
CVE-2023-53911
CVSS 5.4 MEDIUM 2025-12-17FIX AVAILABLE
CVE-2021-28002
CVSS 5.4 MEDIUM 2021-08-19FIX AVAILABLE
CVE-2021-28001
CVSS 5.4 MEDIUM 2021-08-19
CVE-2020-23239
CVSS 4.8 MEDIUM 2021-07-26FIX AVAILABLE
CVE-2014-4737 2 exploits
CVSS 4.3 MEDIUM 2014-10-10FIX AVAILABLE
Textpattern 4.5.5 Cross Site Scripting VulnerabilityTextpattern 4.5.5 Cross Site Scripting
CVE-2011-5019 2 exploits
CVSS 4.3 MEDIUM 2012-01-05FIX AVAILABLE
TextPattern 4.4.1 - 'ddb' Cross-Site ScriptingTextpattern CMS 4.4.1 Cross Site Scripting