File and Path Handling

Every one of the 7 is a mark on the map. Named now: 1 to 7, most at risk first.

1. Directory Traversal vulnerability in Textpattern CMS v4.8.8 allows a remote authenticated attacker to execute arbitrary code and gain access to sensitive information via the plugi…CVE-2023-36220Textpattern · 3.4% likely

   CWE-22

2. An arbitrary file upload vulnerability in the upload plugin of Textpattern v4.8.8 and below allows attackers to execute arbitrary code by uploading a crafted PHP file.CVE-2023-26852Textpattern · CVSS 7.2 · 2.0% likely

   CWE-434

3. Textpattern 4.7.3 contains an aribtrary file load via the file_insert function in include/txp_file.php.CVE-2020-19510Textpattern · 1.5% likely

   CWE-434

4. An arbitrary file upload vulnerability in the plugin upload function of Textpattern v4.8.8 allows attackers to execute arbitrary code via a crafted Zip file.CVE-2023-24269Textpattern · CVSS 8.8 · 1.1% likely

   CWE-434

5. There is an arbitrary file upload vulnerability in the background of textpattern cms v4.8.8, which leads to the loss of server permissions.CVE-2023-50038Textpattern · 0.8% likely

   CWE-434

6. Textpattern V4.8.4 contains an arbitrary file upload vulnerability where a plug-in can be loaded in the background without any security verification, which may lead to obtaining s…CVE-2021-30209Textpattern · 0.8% likely

   CWE-434

7. TextPattern CMS 4.8.7 Remote Code Execution via File UploadCVE-2021-47943Textpattern · CVSS 8.8 · 0.6% likely

   CWE-434

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.