Plugin icon

Webmention

webmention

Vulnerabilities:

3

Last Updated:

June 23, 2026

Active Installs:

900

Published
Title
Fixed in
CVSS
Published
2026-06-30
Title
Webmention < 5.8.1 - Unauthenticated Stored Cross-Site Scripting via MF2 'photo'/'url' Author Properties
Fixed in
Fixed in 5.8.1
CVSS
7.2 (high)
Published
2026-04-01
Title
Webmention < 5.7.0 - Authenticated (Subscriber+) Server-Side Request Forgery
Fixed in
Fixed in 5.7.0
CVSS
6.4 (medium)
Published
2026-04-01
Title
Webmention < 5.7.0 - Unauthenticated Blind Server-Side Request Forgery
Fixed in
Fixed in 5.7.0
CVSS
7.2 (high)