Unknown Markup Markdown vulnerabilities

2 CVEs affecting Unknown Markup Markdown, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-9541, published 2025-09-22.

More from Unknown.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-9541, published 2025-09-22. Medium severity, CVSS 4.7. EPSS: 0.2% chance of exploitation in the next 30 days. The Markup Markdown WordPress plugin before 3.20.10 allows links to contain JavaScript which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
• CVE-2025-9540, published 2025-09-22. Medium severity, CVSS 4.7. EPSS: 0.2% chance of exploitation in the next 30 days. The Markup Markdown WordPress plugin before 3.20.10 allows links to contain JavaScript which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.