Input validation vulnerability in teachPress 9.0.7

The TeachPress plugin, which is used with WordPress, has a security vulnerability that allows hackers to access sensitive information through a feature called ‘tpsearch’. This vulnerability affects all versions up to 9.0.7 and is caused by a lack of proper protection in the code. This means that attackers with Contributor-level access or higher can add their own queries to the existing ones, potentially exposing confidential data from the database.