CVE-2025-58860

CVE-2025-58860 — WordPress Enable Latex CSRF leading to Stored XSS Affected software: KaizenCoders Enable Latex WordPress plugin (versions up to and including 1.2.16). What is affected and how: A Cross-Site Request Forgery (CSRF) vulnerability exists in Enable Latex that can lead to Stored Cross-...

CVE-2025-58860 WordPress Enable Latex Plugin <= 1.2.16 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in KaizenCoders Enable Latex enable-latex allows Stored XSS.This issue affects Enable Latex: from n/a through = 1.2.16...

WordPress Enable Latex Plugin <= 1.2.16 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Enable Latex versions = 1.2.16...

PT-2025-36199

Name of the Vulnerable Software and Affected Versions: KaizenCoders Enable Latex versions n/a through 1.2.16 Description: A Cross-Site Request Forgery CSRF vulnerability exists in KaizenCoders Enable Latex, which can also lead to Stored Cross-Site Scripting XSS. Recommendations: Update KaizenCode...

WordPress plugin Enable Latex 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

Inclusion of Functionality from Untrusted Control Sphere

Overview Affected versions of this package are vulnerable to Inclusion of Functionality from Untrusted Control Sphere due to incomplete LaTeX sanitization that fails to block the verbatim package. The Latex handling module overlooks the verbatim package during sanitization, allowing specially...

Incomplete List of Disallowed Inputs

Overview Affected versions of this package are vulnerable to Incomplete List of Disallowed Inputs due to a LaTeX blocklist bypass in the LaTeX processing functionality. The LaTeX module fails to enforce its blocklist properly, allowing specially crafted malicious flashcards to create arbitrary...

In Emacs before 29.3, LaTeX preview is enabled by default for e-mail attachments.

...

Linux Distros Unpatched Vulnerability : CVE-2021-40694

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient escaping of the LaTeX preamble made it possible for site administrators to read files available to the HTTP server system account. CVE-2021-40694...

Malicious code in test-mlw2-could-latex-solen-teddy (npm)

The package test-mlw2-could-latex-solen-teddy was found to contain malicious code...

Malicious code in test-mlw1-could-latex-solen-teddy (npm)

The package test-mlw1-could-latex-solen-teddy was found to contain malicious code...

Malicious code in @malware-test-could-latex-solen-teddy/test-mlw3-could-latex-solen-teddy (npm)

The package @malware-test-could-latex-solen-teddy/test-mlw3-could-latex-solen-teddy was found to contain malicious code...

MAL-2025-35132 Malicious code in test-mlw2-could-latex-solen-teddy (npm)

The package test-mlw2-could-latex-solen-teddy was found to contain malicious code...

MAL-2025-34778 Malicious code in test-mlw1-could-latex-solen-teddy (npm)

The package test-mlw1-could-latex-solen-teddy was found to contain malicious code...

ROS-20250814-12

EMACS text editor vulnerability is related to incorrect input validation of the org-babel-execute:latex in ob-latex.el when processing file or directory names. Exploitation of the vulnerability could allow an attacker to execute arbitrary code...

Linux Distros Unpatched Vulnerability : CVE-2023-28617

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name or directory name...

[SECURITY] Fedora 41 Update: transfig-3.2.9a^20250619.ee3f4d8-1.fc41

The transfig utility creates a makefile which translates FIG created by xfig or PIC figures into a specified LaTeX graphics language for example, PostScriptTM. Transfig is used to create TeX documents which are portable i.e., they can be printed in a wide variety of environments. Install transfig...

[SECURITY] Fedora 42 Update: transfig-3.2.9a^20250619.ee3f4d8-2.fc42

The transfig utility creates a makefile which translates FIG created by xfig or PIC figures into a specified LaTeX graphics language for example, PostScriptTM. Transfig is used to create TeX documents which are portable i.e., they can be printed in a wide variety of environments. Install transfig...

CLSA-2025-1752750189 emacs: Fix of CVE-2024-30204

CVE-2024-30204: disable LaTeX preview for e-mail attachments to protection when untrusted-content is non-nil...

CVE-2024-45312

Overleaf is a web-based collaborative LaTeX editor. Overleaf Community Edition and Server Pro prior to version 5.0.7 or 4.2.7 for the 4.x series contain a vulnerability that allows an arbitrary language parameter in client spelling requests to be passed to the aspell executable running on the...