Product by Automattic

    ActivityPub

    5 known vulnerabilities in ActivityPub (Automattic), 0 of them actively exploited (CISA KEV).

    Key figures

    5

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in ActivityPub (Automattic)
    HighCVE-2026-4338

    ActivityPub Routing < 8.0.2 - Unauthenticated Drafts/Scheduled/Pending Posts Disclosure

    		7.5
    MediumCVE-2023-3746

    ActivityPub for WordPress < 1.0.1 - Contributor+ Stored XSS

    		5.4
    MediumCVE-2023-5057

    ActivityPub for WordPress < 1.0.0 - Contributor+ Stored XSS

    		5.4
    MediumCVE-2023-3706

    ActivityPub for WordPress < 1.0.0 - Subscriber+ Arbitrary Post Title Disclosure

    		4.3
    MediumCVE-2023-3707

    ActivityPub for WordPress < 1.0.0 - Subscriber+ Arbitrary Post Content Disclosure

    		4.3

    All products by Automattic