Six Apart Ltd. Movable Type vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Six Apart Ltd. Movable Type: 5 record(s), with affected versions and fixes.cpe:2.3:a:sixapart:movable_type
CVE-2026-96408
Critical · 9.4
CWE-94 Oct 7, 2026
Code Injection in Six Apart Ltd. Movable Type (Cloud Edition)
A code injection vulnerability exists in the upgrade script of Movable Type, which may allow an unauthenticated attacker to execute an arbitrary Perl script or an SQL query on the affected product.
CVE-2026-103668
High · 8.6
CWE-89 Oct 7, 2026
SQL Injection in Six Apart Ltd. Movable Type (Cloud Edition)
An SQL Injection vulnerability exists in the Site Search function of Movable Type, which may allow an unauthenticated attacker to execute an arbitrary SQL query on the affected product.
CVE-2026-44392
Medium · 4.3
CWE-862 May 20, 2026
Missing Authorization in Six Apart Ltd. Movable Type
Missing authorization vulnerability exists in Movable Type. Under certain conditions, when a user without administrator privileges signs in to the product, unintended update processing may be executed.
CVE-2026-33088
Critical · 9.8
CWE-89 Apr 8, 2026
SQL Injection in Six Apart Ltd. Movable Type
Movable Type provided by Six Apart Ltd. contains an SQL Injection vulnerability which may allow an attacker to execute an arbitrary SQL statement.
CVE-2026-25776
Critical · 9.8
CWE-94 Apr 8, 2026
Code Injection in Six Apart Ltd. Movable Type
Movable Type provided by Six Apart Ltd. contains a code injection vulnerability which may allow an attacker to execute arbitrary Perl script.