CVE-2025-9540

The Markup Markdown WordPress plugin before 3.20.10 allows links to contain JavaScript which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2025-9541

The Markup Markdown WordPress plugin before 3.20.10 allows links to contain JavaScript which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2025-9541

The Markup Markdown WordPress plugin (versions prior to 3.20.10 ) is vulnerable to a Stored Cross-Site Scripting (XSS) attack. The root cause is the plugin's failure to properly neutralize input, allowing links to contain JavaScript . This vulnerability can be exploited by users with contributor ...

CVE-2025-9541 Markup Markdown < 3.20.10 - Contributor+ Stored XSS

The Markup Markdown WordPress plugin before 3.20.10 allows links to contain JavaScript which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2025-9540 Markup Markdown < 3.20.10 - Contributor+ Stored XSS

The Markup Markdown WordPress plugin before 3.20.10 allows links to contain JavaScript which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

Malicious code in prettier-plugin-markdown-europa-spawn-csv (npm)

The package prettier-plugin-markdown-europa-spawn-csv was found to contain malicious code...

MAL-2025-43755 Malicious code in chai-prettier-plugin-markdown-weywot-ichnology (npm)

The package chai-prettier-plugin-markdown-weywot-ichnology was found to contain malicious code...

MAL-2025-45588 Malicious code in prettier-plugin-markdown-sadr-loop-decoherence (npm)

The package prettier-plugin-markdown-sadr-loop-decoherence was found to contain malicious code...

Malicious code in prettier-plugin-markdown-global-algol-taphonomy (npm)

The package prettier-plugin-markdown-global-algol-taphonomy was found to contain malicious code...

MAL-2025-45586 Malicious code in prettier-plugin-markdown-global-algol-taphonomy (npm)

The package prettier-plugin-markdown-global-algol-taphonomy was found to contain malicious code...

WordPress Markup Markdown plugin <= 3.20.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by JeonKim in WordPress Plugin Markup Markdown versions = 3.20.6...

Malicious code in speleology-puppeteer-optimize-css-assets-webpack-plugin-prettier-plugin-markdown (npm)

The package speleology-puppeteer-optimize-css-assets-webpack-plugin-prettier-plugin-markdown was found to contain malicious code...

Malicious code in xerxes-prettier-plugin-markdown-airbnb-resolvers (npm)

The package xerxes-prettier-plugin-markdown-airbnb-resolvers was found to contain malicious code...

MAL-2025-23314 Malicious code in ionosphere-prettier-plugin-markdown-yonder-chai (npm)

The package ionosphere-prettier-plugin-markdown-yonder-chai was found to contain malicious code...

MAL-2025-27682 Malicious code in nodejs-prettier-plugin-markdown-terraforming-websockets (npm)

The package nodejs-prettier-plugin-markdown-terraforming-websockets was found to contain malicious code...

Malicious code in australis-nightwatch-prettier-plugin-markdown-tectonophysics (npm)

The package australis-nightwatch-prettier-plugin-markdown-tectonophysics was found to contain malicious code...

MAL-2025-39757 Malicious code in xerxes-prettier-plugin-markdown-airbnb-resolvers (npm)

The package xerxes-prettier-plugin-markdown-airbnb-resolvers was found to contain malicious code...

Malicious code in rollup-development-vega-prettier-plugin-markdown (npm)

The package rollup-development-vega-prettier-plugin-markdown was found to contain malicious code...

Regular Expression Denial of Service

Overview In affected versions of @ckeditor/ckeditor5-markdown-gfm a regular expression denial of service ReDoS vulnerability has been discovered. Impact The vulnerability allowed to abuse a link recognition regular expression, which could cause a significant performance drop resulting in a browse...

CVE-2021-21254

CKEditor 5 is an open source rich text editor framework with a modular architecture. The CKEditor 5 Markdown plugin @ckeditor/ckeditor5-markdown-gfm before version 25.0.0 has a regex denial of service ReDoS vulnerability. The vulnerability allowed to abuse link recognition regular expression, whi...