AC
Product
Activitypub
5
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 4Low 0
Watch
Add Activitypub to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-5057 | 5.4 | Oct 16 | The ActivityPub WordPress plugin before 1.0.0 does not escape user metadata before outputting them in mentions, which could allow users with a role of Contributor and above to… Affected: before 1.0.0 |
| CVE-2023-3746 | 5.4 | Oct 16 | The ActivityPub WordPress plugin before 1.0.0 does not sanitize and escape some data from post content, which could allow contributor and above role to perform Stored Cross-Site… Affected: before 1.0.0 |
| CVE-2023-3707 | 4.3 | Oct 16 | The ActivityPub WordPress plugin before 1.0.0 does not ensure that post contents to be displayed are public and belong to the plugin, allowing any authenticated user, such as… Affected: before 1.0.0 |
| CVE-2023-3706 | 4.3 | Oct 16 | The ActivityPub WordPress plugin before 1.0.0 does not ensure that post titles to be displayed are public and belong to the plugin, allowing any authenticated user, such as… Affected: before 1.0.0 |
Showing 4