CVE-2026-4338

概要

参考情報

• wpscan.com/vulnerability/50f68395-72fc-4f99-8e6d-6aa90cc640b5 · Third Party Advisory

activitypub のその他の脆弱性

• CVE-2023-5057中 5.4The ActivityPub WordPress plugin before 1.0.0 does not escape user metadata before outputting them in mentions, which could allow users with…
• CVE-2023-3746中 5.4The ActivityPub WordPress plugin before 1.0.0 does not sanitize and escape some data from post content, which could allow contributor and ab…
• CVE-2023-3707中 4.3The ActivityPub WordPress plugin before 1.0.0 does not ensure that post contents to be displayed are public and belong to the plugin, allowi…
• CVE-2023-3706中 4.3The ActivityPub WordPress plugin before 1.0.0 does not ensure that post titles to be displayed are public and belong to the plugin, allowing…