Plugin icon

ActivityPub

activitypub

Vulnerabilities:

6

Last Updated:

March 17, 2026

Active Installs:

6000

Published
Title
Fixed in
CVSS
Published
2026-03-18
Title
ActivityPub Routing < 8.0.2 - Unauthenticated Drafts/Scheduled/Pending Posts Disclosure
Fixed in
Fixed in 8.0.2
CVSS
7.5 (high)
Published
2024-01-05
Title
ActivityPub for WordPress < 1.0.6 - Unauthenticated REST API Access
Fixed in
Fixed in 1.0.6
CVSS
5.3 (medium)
Published
2023-09-25
Title
ActivityPub for WordPress < 1.0.0 - Subscriber+ Arbitrary Post Content Disclosure
Fixed in
Fixed in 1.0.0
CVSS
4.3 (medium)
Published
2023-09-25
Title
ActivityPub for WordPress < 1.0.1 - Contributor+ Stored XSS
Fixed in
Fixed in 1.0.1
CVSS
6.8 (medium)
Published
2023-09-25
Title
ActivityPub for WordPress < 1.0.0 - Subscriber+ Arbitrary Post Title Disclosure
Fixed in
Fixed in 1.0.0
CVSS
4.3 (medium)
Published
2023-09-25
Title
ActivityPub for WordPress < 1.0.0 - Contributor+ Stored XSS
Fixed in
Fixed in 1.0.0
CVSS
6.8 (medium)