Winkm89 vulnerabilities
We track 2 vulnerabilities in Winkm89 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on April 4, 2025.
2vulnerabilities
0critical
2high
0exploited
8.8average CVSS score
Latest Winkm89 vulnerabilities
- 8.8 High severity
teachPress: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in winkm89 teachPress teachpress allows SQL Injection.This issue affects teachPress: from n/a through <= 9.0.11.
- 8.8 High severity
teachPress: Improper Neutralization of Special Elements used in an SQL Command
The teachPress plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter of the 'tpsearch' shortcode in all versions up to, and including, 9.0.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation