ActivityPub vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

AC

Product

ActivityPub

by · last CVE Apr 8, 2026

5

CVEs

0

On KEV

7.5

Max CVSS

0

New 30D

Vulnerabilities5 In the news0 Timeline

Severity mix

Critical 0High 1Medium 4Low 0

Severity

All severities5 Critical0 High1 Medium4 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add ActivityPub to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-4338	7.5	0%	Apr 8	ActivityPub Routing < 8.0.2 - Unauthenticated Drafts/Scheduled/Pending Posts Disclosure Affected: before 8.0.2
CVE-2023-3746	5.4	0%	Oct 16	ActivityPub for WordPress < 1.0.1 - Contributor+ Stored XSS Affected: before 1.0.0
CVE-2023-5057	5.4	0%	Oct 16	ActivityPub for WordPress < 1.0.0 - Contributor+ Stored XSS Affected: before 1.0.0
CVE-2023-3706	4.3	1%	Oct 16	ActivityPub for WordPress < 1.0.0 - Subscriber+ Arbitrary Post Title Disclosure Affected: before 1.0.0
CVE-2023-3707	4.3	1%	Oct 16	ActivityPub for WordPress < 1.0.0 - Subscriber+ Arbitrary Post Content Disclosure Affected: before 1.0.0