CVE-2026-4338

Vulnerability in Automattic Activitypub

CVSS score

7.5

EPSS probability

%0.4

Risk score

0.0

Published

6 mo ago

Overview Public Exploits (0)Newsroom Vulnerability Timeline

Related Security News

Articles and analysis bulletins in which the press and security publications have covered this vulnerability:

No verified news item has been matched to this CVE yet.

Similar Vulnerabilities

9.8

CVE-2023-28121Improper authentication in Automattic Woocommerce Payments

Vendorautomattic Productwoocommerce payments+1 etkilenen

Patch status unknown Public Exploits:10EPSS %873 y ago

4.9

CVE-2024-1310Vulnerability in Automattic Woocommerce

Vendorautomattic Productwoocommerce

Patch status unknown Public Exploits:1EPSS %12 y ago

6.5

CVE-2026-73562Mongoose: Prototype pollution in the update casting via __proto__-prefixed dotted path (Schema._getSchema/path getter)

Vendorautomattic Productmongoose+2 etkilenen

Patch verifiedEPSS %12 mo ago

7.1

CVE-2026-93485WordPress Core <= 7.1 - Cross Site Scripting (XSS) vulnerability

Vendorautomattic ProductWordPress

Patch status unknownEPSS %01 mo ago

6.9

CVE-2026-66666WordPress Core <= 7.1.2 - Unauthenticated Sensitive Data Exposure of Comments on Private and Unpublished Posts via Comment Feed vulnerability

Vendorautomattic ProductWordPress

Patch status unknownEPSS %013 d ago

7.2

CVE-2026-106608WordPress WooCommerce plugin 9.8.0-11.1.2 - Shop Manager+ Privilege Escalation vulnerability

Vendorautomattic Productwoocommerce

Patch status unknownEPSS %09 d ago

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free key Documentation

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-4338"

Vulnerability in Automattic Activitypub

Related Security News

Similar Vulnerabilities

Get this vulnerability through the API

DayBreach

Glossary & Reference

Directories & Feeds

RSS & Integration