CVE Intelligence

Automattic Activitypub vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Automattic Activitypub: 1 record(s), with affected versions and fixes.
cpe:2.3:a:automattic:activitypub

CVE-2026-4338 High · 7.5 Apr 8, 2026
ActivityPub Routing < 8.0.2 - Unauthenticated Drafts/Scheduled/Pending Posts Disclosure
The ActivityPub WordPress plugin before 8.0.2 does not properly filter posts to be displayed, allowed unauthenticated users to access drafts/scheduled/pending posts