Cross-Site Request Forgery Vulnerability in KaizenCoders Enable Latex Plugin
CVE-2025-58860

7.1HIGH

Key Information:

Vendor

WordPress
Status
Enable Latex
Vendor
CVE Published:
5 September 2025

What is CVE-2025-58860?

A Cross-Site Request Forgery (CSRF) vulnerability exists in the KaizenCoders Enable Latex plugin, which can lead to potential stored Cross-Site Scripting (XSS) attacks. This vulnerability affects all versions up to and including 1.2.16, allowing attackers to manipulate user requests to perform unauthorized actions without their consent. It underscores the importance of securing user input and implementing adequate anti-CSRF measures to protect against such exploits.

Affected Version(s)

Enable Latex <= 1.2.16

References

https://patchstack.com/database/wordpress/plugin/enable-l...
vdb-entry

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Nguyen Xuan Chien (Patchstack Alliance)
.