Advisories · Technology

Six Apart Ltd. Movable Type Premium.

Every CVE that names Six Apart Ltd. Movable Type Premium among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-103668 CVE record

CVSS 8.8 High

SQL injection in Six Apart Ltd. Movable Type Cloud Edition and others
- Six Apart Ltd. Movable Type Cloud Edition
- Six Apart Ltd. Movable Type
- SQL injection
Not analysed yet 7 Oct 2026
CVE-2026-96408 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Code injection in Six Apart Ltd. Movable Type Cloud Edition and others
- Six Apart Ltd. Movable Type Cloud Edition
- Six Apart Ltd. Movable Type
- Code injection
Not analysed yet 7 Oct 2026
CVE-2026-44392 CVE record

CVSS 5.3 Medium

Missing authorization in Six Apart Ltd. Movable Type and others
- Six Apart Ltd. Movable Type
- Six Apart Ltd. Movable Type Advanced
- Broken access control
Not analysed yet 20 May 2026
CVE-2026-25776 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Code injection in Six Apart Ltd. Movable Type and others
- Six Apart Ltd. Movable Type
- Six Apart Ltd. Movable Type Advanced
- Code injection
Not analysed yet 8 Apr 2026
CVE-2026-33088 CVE record

CVSS 6.9 Medium

SQL injection in Six Apart Ltd. Movable Type and others
- Six Apart Ltd. Movable Type
- Six Apart Ltd. Movable Type Advanced
- SQL injection
Not analysed yet 8 Apr 2026
CVE-2023-45746 CVE record

CVSS 5.4 Medium

Cross-site scripting vulnerability in Movable Type series allows a remote authenticated attacker to inject an arbitrary script.
- Six Apart Ltd. Movable Type 7 (Movable Type 7 Series)
- Six Apart Ltd. Movable Type Advanced 7 (Movable Type 7 Series)
Not analysed yet 30 Oct 2023