Medium · 6.5 CVE-2023-52199 EUVD-2023-56872GHSA-5cg4-pm73-p483

WordPress ActivityPub plugin <= 1.0.5 - Unauthenticated Broken Access Control vulnerability

Published Jun 11, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in Matthias Pfefferle & Automattic ActivityPub.This issue affects ActivityPub: from n/a through 1.0.5.

Vendor	Product	Affected	Fixed
Matthias Pfefferle & Automattic	ActivityPub	≤ 1.0.5	—