VendorsAutomatticactivitypubany version
Vulnerabilities

Automattic ActivityPub any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

5CVEs
CVE-2026-4338
ActivityPub Routing < 8.0.2 - Unauthenticated Drafts/Scheduled/Pending Posts Disclosure
Published 2026-04-08 · Analyzed
7.5EPSS 0.004
CVE-2023-3746
ActivityPub for WordPress < 1.0.1 - Contributor+ Stored XSS
Published 2023-10-16 · Modified
5.4EPSS 0.004
CVE-2023-5057
ActivityPub for WordPress < 1.0.0 - Contributor+ Stored XSS
Published 2023-10-16 · Modified
5.4EPSS 0.004
CVE-2023-3706
ActivityPub for WordPress < 1.0.0 - Subscriber+ Arbitrary Post Title Disclosure
Published 2023-10-16 · Modified
4.3EPSS 0.005
CVE-2023-3707
ActivityPub for WordPress < 1.0.0 - Subscriber+ Arbitrary Post Content Disclosure
Published 2023-10-16 · Modified
4.3EPSS 0.005