CVE-2020-19510: Textpattern

Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days.

Textpattern 4.7.3 contains an aribtrary file load via the file_insert function in include/txp_file.php.

Affected products

• Textpattern Textpattern: version 4.7.3 only

Published 2021-06-21. Last modified 2026-06-17.