Automattic CVEs & Vulnerabilities

1 CVEs affecting Automattic products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.

1 CVEs→ All vendors

Most Affected Products

activitypub 1

CVE-2026-4338HIGH

The ActivityPub WordPress plugin before 8.0.2 does not properly filter posts to be displayed, allowed unauthenticated users to access drafts/scheduled/pending posts

8 Apr 2026

7.5

CVSS

← PrevPage 1 / 1Next →

← All Vendors·CVE Database