PT-2025-38691 · WordPress · Markup Markdown

Minseok Kim · Publicado 2025-09-22 · Atualizado 2025-09-22 · CVE-2025-9540

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Média

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Markup Markdown WordPress plugin versions prior to 3.20.10

Description The plugin allows links to contain JavaScript, potentially enabling users with contributor or higher roles to execute Stored Cross-Site Scripting attacks.

Recommendations Update the Markup Markdown WordPress plugin to version 3.20.10 or later.

Exploit

Correção

Identificadores relacionados

CVE-2025-9540

Produtos afetados

Markup Markdown

Referências · 3

• 🔥 https://wpscan.com/vulnerability/79e606df-50a0-4639-b2d9-4a77111fd729 · Exploit
• https://t.me/CVEtracker/33035 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2025-9540 · Nota de Segurança