LaTeX2HTML

LaTeX2HTML has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2024; all 2 are fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10. 2024 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 2 of the records (100%).

Every one of the 2 issues recorded for LaTeX2HTML has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. LaTeX2HTML is installed on roughly 200 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.7.7.

Strategic Overview

Avg CVSSMedium

6.1/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all LaTeX2HTML vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.1CVE-2024-11688

LaTeX2HTML <= 2.5.5 - Reflected Cross-Site Scripting

Read the full analysis

Vulnerability Records

2 records


2024-12-20 20:38	LaTeX2HTML <= 2.5.5 - Reflected Cross-Site Scripting LaTeX2HTML <= 2.5.5	`CVE-2024-11688`	6.1 Medium	vgo0	Yes
2024-10-21 00:00	LaTeX2HTML <= 2.5.4 - Reflected Cross-Site Scripting LaTeX2HTML <= 2.5.4	`CVE-2024-49673`	6.1 Medium	ardias	Yes

Showing 1–2 of 2 reports

Latestv2.6.3

LaTeX2HTML

Author

Van Abel

4.8(9)

96/100

Last Updated

2026-05-19 (4mo ago)

Active Installs

200+

Downloads

14,706

Requires WP

5.0+

Requires PHP

Tested up to

WP 6.7.7

Created

2013-01-23 (14y ago)

LaTeX2HTML makes you write blog like in LaTeX doc. You can just copy and paste to create a new post in WP from your tex source file, then it will looks like amsart document style. It support a lot of raw latex command including theorem like environment and BibTeX style citation. Main Functions Enable MathJax to render math formula. Translate raw LaTeX (almost all the command of amsart) to HTML+CSS markup. Almost every thing is customizable, but also works perfect by default. e.g., support \newcommand License Good news, this plugin is free for everyone! Since it’s released under the GPL2, you can use it free of charge on your personal or commercial blog.

View on WordPress.org