Teachpress@* Security Vulnerabilities and Issues — Teachpress@* CVE List

Lucene search

MtrvTeachpress*

7 matches found

CVE•added 2023/12/18 11:15 p.m.•60 views

CVE-2023-49163

Cross-Site Request Forgery (CSRF) vulnerability in Michael Winkler teachPress.This issue affects teachPress: from n/a through 9.0.5.

8.8CVSS7AI score0.00059EPSS

CVE•added 2025/03/04 4:15 a.m.•54 views

CVE-2025-1321

The teachPress plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter of the 'tpsearch' shortcode in all versions up to, and including, 9.0.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes i...

8.8CVSS7.3AI score0.0004EPSS

CVE•added 2025/03/25 7:15 a.m.•47 views

CVE-2025-1320

The teachPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 9.0.9. This is due to missing or incorrect nonce validation on the import.php page. This makes it possible for unauthenticated attackers to delete imports via a forged request grant...

4.3CVSS6.7AI score0.00011EPSS

CVE•added 2025/04/04 4:15 p.m.•44 views

CVE-2025-32149

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in winkm89 teachPress allows SQL Injection. This issue affects teachPress: from n/a through 9.0.11.

8.8CVSS8.8AI score0.00059EPSS

CVE•added 2023/03/23 12:15 p.m.•42 views

CVE-2023-22704

Reflected Cross-Site Scripting (XSS) vulnerability in Michael Winkler teachPress plugin

7.1CVSS6AI score0.00083EPSS

CVE•added 2024/01/05 9:15 a.m.•36 views

CVE-2023-52129

Cross-Site Request Forgery (CSRF) vulnerability in Michael Winkler teachPress.This issue affects teachPress: from n/a through 9.0.4.

8.8CVSS8.6AI score0.00048EPSS

CVE•added 2023/07/25 2:15 p.m.•29 views

CVE-2023-36501

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Michael Winkler teachPress plugin

7.1CVSS6.1AI score0.00087EPSS