WP Editor.md – The Perfect WordPress Markdown Editor

WP Editor.md – The Perfect WordPress Markdown Editor has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2018 and 2025; 1 is fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 4.6, and the most serious one scores 4.8 out of 10.

The most common weakness is Cross-Site Scripting, behind 2 of the records (100%).

1 of the records (50%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2025.

All of these findings were reported by H4ckForJob.

Strategic Overview

Avg CVSSMedium

4.6/ 10

Patch Coverage50%

Open

Fixed

Get automatic notifications for all WP Editor.md – The Perfect WordPress Markdown Editor vulnerabilities before they are exploited.

Most severe open issueCVSS 4.4CVE-2025-31035

WP Editor.md – The Perfect WordPress Markdown Editor <= 10.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

2 records


2025-04-09 00:00	WP Editor.md – The Perfect WordPress Markdown Editor <= 10.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting WP Editor.md <= 10.2.1	`CVE-2025-31035`	4.4 Medium	Anonymous	No
2018-10-31 00:00	WP Editor.md – The Perfect WordPress Markdown Editor < 10.0.4 - Cross-Site Scripting WP Editor.md < 10.0.4	`CVE-2018-18919`	4.8 Medium	H4ckForJob	Yes

Showing 1–2 of 2 reports