Skip to content
OpenAdvisories
Medium · 5.9 CVE-2025-31035 EUVD-2025-10660GHSA-3j2q-q8wr-v983

WordPress WP Editor.md – The Perfect Markdown Editor plugin <= 10.2.1 - Cross Site Scripting (XSS) Vulnerability

Published Apr 9, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Benjamin Chris WP Editor.md – The Perfect WordPress Markdown Editor wp-editormd allows Stored XSS.This issue affects WP Editor.md – The Perfect WordPress Markdown Editor: from n/a through <= 10.2.1.

Affected products

VendorProductAffectedFixed
Benjamin Chris WP Editor.md – The Perfect WordPress Markdown Editor ≤ 10.2.1 —

References