CVE-2025-1321

CVE-2025-1321 concerns the WordPress teachPress plugin. Connected sources confirm a SQL Injection via the tpsearch shortcode’s order parameter in all versions up to 9.0.7, caused by insufficient escaping and improper SQL query preparation. An authenticated attacker with Contributor-level access o...

CVE-2023-49163

CVE-2023-49163: teachPress for WordPress is affected up to version 9.0.5 by a Cross-Site Request Forgery (CSRF) in delete_database() that can enable unauthenticated actions. Patch: upgrade to 9.0.6 (fixes CSRF issue). The vulnerability is documented as CSRF with unauthenticated context and has be...

CVE-2025-1320

CVE-2025-1320: teachPress WordPress plugin vulnerable to Cross-Site Forgery on Import Delete (import.php) due to missing nonce validation. Affected versions up to 9.0.9; unpatched as per sources. Attack requires user interaction via a forged request, enabling unauthenticated actors to delete impo...

CVE-2025-32149

CVE-2025-32149 affects the WordPress plugin teachPress (up to 9.0.11). The issue is an SQL injection caused by improper neutralization of input in the plugin, with exploitation requiring authentication (Contributor+). Current references indicate the patch status is Unpatched; no exploits or in-th...

CVE-2023-22704

The CVE-2023-22704 entry concerns the teachPress WordPress plugin, affected versions ≤ 8.1.8. The underlying issue is a Reflected Cross-Site Scripting (XSS) vulnerability, caused by the plugin not sanitizing/escaping inputs (notably the tab parameter) before output. Exploitation is described as p...

CVE-2023-52129

Summary : CVE-2023-52129 affects the WordPress teachPress plugin and is described as a Cross-Site Request Forgery (CSRF) vulnerability in versions

CVE-2023-36501

The CVE-2023-36501 entry concerns the WordPress teachPress plugin (affected versions ≤ 9.0.2) and describes an unauthenticated, reflected Cross-Site Scripting (XSS) vulnerability via meta_field_id and cite_id. The issue is confirmed in multiple sources (Patchstack and CVE/NVD references) with a r...