What’s Vulnerable › Products

Mattermost Confluence Plugin vulnerabilities

14 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 14 published in the last 12 months.

Check whether your Mattermost Confluence Plugin version is affected

Latest Mattermost Confluence Plugin vulnerabilities

• CVE-2025-13523 — Cross-Site Scripting (XSS) via Unescaped Display Names in Mattermost Confluence Plugin OAuth2 Flow (CVSS 5.4)
• CVE-2025-8285 — Unauthorized Channel Subscription Creation in Mattermost Confluence Plugin (CVSS 5.3)
• CVE-2025-54525 — Unexpected input to Create Channel Subscription endpoint causes DoS in Mattermost Confluence Plugin (CVSS 7.5)
• CVE-2025-54478 — Unauthenticated Channel Subscription Edit in Mattermost Confluence Plugin (CVSS 5.3)
• CVE-2025-54463 — Unexpected Input to Cloud Webhook endpoint Causes DoS in Mattermost Confluence Plugin (CVSS 7.5)
• CVE-2025-54458 — Unauthorized Subscription Creation to Confluence Space in Mattermost Confluence Plugin (CVSS 5.0)
• CVE-2025-53910 — Unauthorized Channel Subscription Edit in Mattermost Confluence Plugin (CVSS 4.0)
• CVE-2025-53857 — Lack of Authorization on Get Channel Subscriptions for Autocomplete in Mattermost Confluence Plugin (CVSS 3.7)
• CVE-2025-53514 — Unexpected Input to Server Webhook endpoint Causes DoS in Mattermost Confluence Plugin (CVSS 5.9)
• CVE-2025-52931 — Unexpected input to Update Channel Subscription endpoint causes DoS in Mattermost Confluence Plugin (CVSS 7.5)
• CVE-2025-49221 — Unauthenticated Access to Channel Subscription in Mattermost Confluence Plugin (CVSS 3.7)
• CVE-2025-48731 — Unauthorized Subscription Edit to Confluence Space in Mattermost Confluence Plugin (CVSS 6.4)
• CVE-2025-44004 — Unauthenticated Channel Subscription Creation in Mattermost Confluence Plugin (CVSS 7.2)
• CVE-2025-44001 — Unauthorized Channel Subscription Read in Mattermost Confluence Plugin (CVSS 4.0)