anonhaven
Ad

CVE-2026-4338

NONE EPSS 0.04%
Updated Apr 08, 2026
Unknown
Parameter Value
Affected Versions before 8.0.2
Type CWE-200 Information Exposure
Vendor Unknown
Public PoC No

The ActivityPub WordPress plugin before 8.0.2 does not properly filter posts to be displayed, allowed unauthenticated users to access drafts/scheduled/pending posts

Weakness Type (CWE)

CWE-200 Information Exposure

Vulnerable Products

unknown:activitypub

References 1

https://wpscan.com/vulnerability/50f68395-72fc-4f99-8e6d-6aa90cc640b5/
NVD
Share Post Share Share Share

Related Vulnerabilities

CVE-2026-3830

Unknown

None

CVE-2025-15441

Unknown

None

CVE-2026-4432

Unknown

6.5

CVE-2026-4079

Guaven

6.5

CVE-2026-1900

Unknown

6.5