AC
Product
Activitypub
by Automattic · last CVE Apr 8, 2026
6
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 5Low 0
Watch

Add Activitypub to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-52199
6.5
0%
Jun 11
WordPress ActivityPub plugin <= 1.0.5 - Unauthenticated Broken Access Control vulnerability
Affected: through 1.0.5
CVE-2023-3746
5.4
0%
Oct 16
ActivityPub for WordPress < 1.0.1 - Contributor+ Stored XSS
Affected: before 1.0.0
CVE-2023-5057
5.4
0%
Oct 16
ActivityPub for WordPress < 1.0.0 - Contributor+ Stored XSS
Affected: before 1.0.0
CVE-2023-3706
4.3
1%
Oct 16
ActivityPub for WordPress < 1.0.0 - Subscriber+ Arbitrary Post Title Disclosure
Affected: before 1.0.0
CVE-2023-3707
4.3
1%
Oct 16
ActivityPub for WordPress < 1.0.0 - Subscriber+ Arbitrary Post Content Disclosure
Affected: before 1.0.0
Showing 5