Add CVE-2025-1321 - WordPress teachPress SQL Injection

[neosmith1]

Template Details

• CVE: CVE-2025-1321
• Product: teachPress WordPress Plugin
• Vulnerability: Unauthenticated SQL Injection
• Severity: Medium (7.5 CVSS)
• Detection: ORDER BY clause injection via tpsearch shortcode parameter

References

• https://nvd.nist.gov/vuln/detail/CVE-2025-1321
• https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/teachpress/teachpress-907-unauthenticated-sql-injection

[theamanrawat]

Hi @neosmith1,

Thank you so much for sharing this template with the community and for contributing to this project. After review, it appears the CVE is authenticated, but the PoC in the template is unauthenticated. For this reason, we are closing this PR for now. Please feel free to submit the template with the updated PoC.