What’s Vulnerable › Products

ActivityPub vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your ActivityPub version is affected

Latest ActivityPub vulnerabilities

• CVE-2026-4338 — ActivityPub Routing < 8.0.2 - Unauthenticated Drafts/Scheduled/Pending Posts Disclosure (CVSS 7.5)
• CVE-2023-52199 — WordPress ActivityPub plugin <= 1.0.5 - Unauthenticated Broken Access Control vulnerability (CVSS 6.5)
• CVE-2023-5057 — ActivityPub for WordPress < 1.0.0 - Contributor+ Stored XSS (CVSS 5.4)
• CVE-2023-3746 — ActivityPub for WordPress < 1.0.1 - Contributor+ Stored XSS (CVSS 5.4)
• CVE-2023-3707 — ActivityPub for WordPress < 1.0.0 - Subscriber+ Arbitrary Post Content Disclosure (CVSS 4.3)
• CVE-2023-3706 — ActivityPub for WordPress < 1.0.0 - Subscriber+ Arbitrary Post Title Disclosure (CVSS 4.3)