Vulnerability Bulletins

CVE-2025-9540

   
Affected software WORDPRESS
 
The Markup Markdown WordPress plugin before 3.20.10 allows links to contain JavaScript which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2025-9540