Vulnerabilities / ActivityPub
ActivityPub vulnerabilities
Advisories WPSec published for ActivityPub. Other sources may list more. Its attack surface: ActivityPub on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-30 | WPSEC-2026-2044 | ActivityPub <= 9.3.1 - Unauthenticated Authentication Bypass via Incoming Activity Signature Verification | Medium 5.3 | 9.4.0 |
| 2026-10-30 | WPSEC-2026-2043 | ActivityPub <= 9.3.1 - Unauthenticated Missing Authorization to Federated Comment Modification via Update and Undo Activities | Medium 5.3 | 9.4.0 |
| 2026-10-30 | WPSEC-2026-2042 | ActivityPub <= 9.3.1 - Authenticated (Author+) Comment Moderation Bypass via Search | Medium 4.3 | 9.4.0 |
License: CC BY 4.0