CVE-2023-36220: Textpattern

High severity, CVSS 7.2. EPSS: 3.4% chance of exploitation in the next 30 days.

Directory Traversal vulnerability in Textpattern CMS v4.8.8 allows a remote authenticated attacker to execute arbitrary code and gain access to sensitive information via the plugin Upload function.

Affected products

• Textpattern Textpattern: version 4.8.8 only

Published 2023-08-07. Last modified 2026-06-17.