Vulnerabilities > Infinitescript
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2025-02-18 | CVE-2024-13578 | Cross-site Scripting vulnerability in Infinitescript Wp-Bibtex The WP-BibTeX plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'WpBibTeX' shortcode in all versions up to, and including, 3.0.1 due to insufficient input sanitization and output escaping on user supplied attributes. | 5.4 |
| 2025-01-21 | CVE-2024-12005 | Cross-Site Request Forgery (CSRF) vulnerability in Infinitescript Wp-Bibtex The WP-BibTeX plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.0.1. | 6.1 |