Automattic Activitypub vulnerabilities

• automattic activitypub ActivityPub Routing < 8.0.2 - Unauthenticated Drafts/Scheduled/Pending Posts Disclosure CVE-2026-4338 7.5 HighApril 8, 2026
• automattic activitypub WordPress ActivityPub plugin <= 1.0.5 - Unauthenticated Broken Access Control vulnerability CVE-2023-52199 6.5 MediumJune 11, 2024
• automattic activitypub ActivityPub for WordPress < 1.0.0 - Subscriber+ Arbitrary Post Title Disclosure CVE-2023-3706 4.3 MediumOctober 16, 2023
• automattic activitypub ActivityPub for WordPress < 1.0.1 - Contributor+ Stored XSS CVE-2023-3746 5.4 MediumOctober 16, 2023
• automattic activitypub ActivityPub for WordPress < 1.0.0 - Contributor+ Stored XSS CVE-2023-5057 5.4 MediumOctober 16, 2023
• automattic activitypub ActivityPub for WordPress < 1.0.0 - Subscriber+ Arbitrary Post Content Disclosure CVE-2023-3707 4.3 MediumOctober 16, 2023