Read the docs

winkm89

Records11All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high7CVSS 7.0–8.9

Exploited now

winkm89 records in CISA KEV

No winkm89 vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Teachpress 7 records LOW

Records

11 records

TI-2025-23247 CVE-2025-32149 · GHSA-9rf7-3m5w-rg76

WordPress teachPress plugin <= 9.0.11 - SQL Injection vulnerability

Priority LOW 39

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in winkm89 teachPress teachpress allows SQL Injection.This issue affects teachPress: from n/a through <= 9.0.11.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00557 Published 2025-04-04 No fix listed CWE-89
TI-2025-01132 CVE-2025-1321 · GHSA-mjgh-x4w3-mfx5

teachPress <= 9.0.7 - Authenticated (Contributor+) SQL Injection

Priority LOW 39

The teachPress plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter of the 'tpsearch' shortcode in all versions up to, and including, 9.0.7 due to insufficient escaping on the user supplied param…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00495 Published 2025-03-04 No fix listed CWE-89
TI-2026-17935 CVE-2026-22353 · GHSA-6x26-wr3f-8332

WordPress teachPress plugin <= 9.0.12 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in winkm89 teachPress teachpress allows Stored XSS.This issue affects teachPress: from n/a through <= 9.0.12.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00196 Published 2026-01-22 No fix listed CWE-79
Open these records in search →