Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

11 records

Vendor: winkm89 Clear all filters
TI-2026-17935 CVE-2026-22353 · GHSA-6x26-wr3f-8332

WordPress teachPress plugin <= 9.0.12 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in winkm89 teachPress teachpress allows Stored XSS.This issue affects teachPress: from n/a through <= 9.0.12.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00196 Published 2026-01-22 No fix listed CWE-79
TI-2025-23247 CVE-2025-32149 · GHSA-9rf7-3m5w-rg76

WordPress teachPress plugin <= 9.0.11 - SQL Injection vulnerability

Priority LOW 39

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in winkm89 teachPress teachpress allows SQL Injection.This issue affects teachPress: from n/a through <= 9.0.11.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00557 Published 2025-04-04 No fix listed CWE-89
TI-2025-01132 CVE-2025-1321 · GHSA-mjgh-x4w3-mfx5

teachPress <= 9.0.7 - Authenticated (Contributor+) SQL Injection

Priority LOW 39

The teachPress plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter of the 'tpsearch' shortcode in all versions up to, and including, 9.0.7 due to insufficient escaping on the user supplied param…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00495 Published 2025-03-04 No fix listed CWE-89