CVE-2023-49163

Description

References

• patchstack.com/database/vulnerability/teachpress/wordpress-teachpress-plugin-9-0-5-cross-site-request-forgery-csrf-vulnerability · Third Party Advisory

Autres vulnérabilités de teachpress

• CVE-2025-32149ÉLEVÉE 8.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in winkm89 teachPress teachpress allows S…
• CVE-2025-1320MOYENNE 4.3The teachPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 9.0.9. This is due to …
• CVE-2025-1321ÉLEVÉE 8.8The teachPress plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter of the 'tpsearch' shortcode in all versions up …
• CVE-2023-52129ÉLEVÉE 8.8Cross-Site Request Forgery (CSRF) vulnerability in Michael Winkler teachPress.This issue affects teachPress: from n/a through 9.0.4.
• CVE-2023-36501MOYENNE 6.1Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Michael Winkler teachPress plugin <= 9.0.2 versions.