Vulnerability Bulletins

CVE-2026-4338

   
Affected software WORDPRESS
 
The ActivityPub WordPress plugin before 8.0.2 does not properly filter posts to be displayed, allowed unauthenticated users to access drafts/scheduled/pending posts

Link:

https://nvd.nist.gov/vuln/detail/CVE-2026-4338