Teachpress@* Security Vulnerabilities and Issues — Teachpress@* CVE List

Lucene search

MtrvTeachpress*

5 matches found

CVE•added 2023/12/18 11:15 p.m.•59 views

CVE-2023-49163

Cross-Site Request Forgery (CSRF) vulnerability in Michael Winkler teachPress.This issue affects teachPress: from n/a through 9.0.5.

8.8CVSS7AI score0.00059EPSS

CVE•added 2025/03/04 4:15 a.m.•54 views

CVE-2025-1321

The teachPress plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter of the 'tpsearch' shortcode in all versions up to, and including, 9.0.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes i...

8.8CVSS7.3AI score0.00048EPSS

CVE•added 2023/03/23 12:15 p.m.•42 views

CVE-2023-22704

Reflected Cross-Site Scripting (XSS) vulnerability in Michael Winkler teachPress plugin

7.1CVSS6AI score0.00083EPSS

CVE•added 2024/01/05 9:15 a.m.•36 views

CVE-2023-52129

Cross-Site Request Forgery (CSRF) vulnerability in Michael Winkler teachPress.This issue affects teachPress: from n/a through 9.0.4.

8.8CVSS8.6AI score0.00048EPSS

CVE•added 2023/07/25 2:15 p.m.•29 views

CVE-2023-36501

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Michael Winkler teachPress plugin

7.1CVSS6.1AI score0.00087EPSS