All 7 CVE vulnerabilities found in ActivityPub, with AI-generated Chinese analysis, references, and POCs.
Vendor: Unknown
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-63115 | ActivityPub Undo handler can unfollow or remove reposts on behalf of other accounts CWE-290 | 5.3 | Medium | 2026-10-30 |
| CVE-2026-4338 | ActivityPub Routing < 8.0.2 - Unauthenticated Drafts/Scheduled/Pending Posts Disclosure | 5.3AI | Medium AI | 2026-04-08 |
| CVE-2023-52199 | WordPress ActivityPub plugin <= 1.0.5 - Unauthenticated Broken Access Control vulnerability CWE-862 | 6.5 | Medium | 2024-06-11 |
| CVE-2023-3706 | ActivityPub for WordPress < 1.0.0 - Subscriber+ Arbitrary Post Title Disclosure | 4.3 | - | 2023-10-16 |
| CVE-2023-3746 | ActivityPub for WordPress < 1.0.1 - Contributor+ Stored XSS | 5.4 | - | 2023-10-16 |
| CVE-2023-5057 | ActivityPub for WordPress < 1.0.0 - Contributor+ Stored XSS | 5.4 | - | 2023-10-16 |
| CVE-2023-3707 | ActivityPub for WordPress < 1.0.0 - Subscriber+ Arbitrary Post Content Disclosure | 6.5 | - | 2023-10-16 |
All 7 known CVE vulnerabilities affecting ActivityPub with full Chinese analysis, references, and POCs where available.