WP Manifestindependent plugin directory
manifest / ai / article-to-markdown

Article to Markdown. WP RegistryHigh-severity findings · 1 findingOpen the reportC-

WordPress plugin to display URLs in markdown

by Igor Benić · github.com/igorbenic/article-to-markdown

★ 2stars
16release downloads
1.1.0latest · 9mo ago

Install

Download article-to-markdown.zip From the 1.1.0 release on GitHub, Jan 22, 2026

Upload it under Plugins → Add New Plugin → Upload Plugin, then activate.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/igorbenic/article-to-markdown/releases/download/1.1.0/article-to-markdown.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.
Readme github.com/igorbenic/article-to-markdown ↗

Article to Markdown - WordPress

This is a simple plugin that converts your article into markdown when viewing the url with a .md extension.

Example:

  • Normal Blog Article: siteexample.com/article
  • Markdown Article: siteexample.com/article.md

Build

Before using this plugin, you need to build it by installing composer and running composer install

Releases

2 releases. Each count is every asset in that release; expand a row for the breakdown.

Tag
Published
Assets
Downloads
1.1.0 latest
Jan 22, 2026 9mo ago
article-to-markdown.zip
14
1.0.0
Jan 17, 2026 9mo ago
article-to-markdown.zip
2
C- grade

Security

Article to Markdown. 1.1.0 · audited by WP Registry

High-severity findings.

1 high
Audited release
1.1.0
Findings
1
Worst severity
high
Content hash
bdc166cf9c43a599846ba518…

Findings

  • high Markdown export serves draft/private/future posts without status or capability checks

    information_disclosure

    parse_request hooks on *.md, LLM User-Agents, or ?format=md, then get_page_by_path($slug, OBJECT, ['post','page']) with no post_status filter and no current_user_can('read_post'). WordPress get_page_by_path does not restrict status, so unauthenticated callers who guess a slug receive full draft/private/password-protected content as text/markdown plus YAML front matter (author, excerpt, dates).

    article-to-markdown.php:28-53

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.

Full report on WP Registry →