Checkuser (Mediawiki) - vulnerabilities (CVEs)

9 CVEs, 0 in the last 30 days, 28 known versions, newest CVE from 2026-09-14. Vendor: Mediawiki.

CVEs of Checkuser

• CVE-2023-37252 - CVSS 3.1 (low), 2026-09-14: An issue was discovered in the CheckUser extension for MediaWiki through 1.39.3. Special:CheckUserLog shows usernames that have been hidden.
• CVE-2026-34090 - CVSS 7.5 (high), 2026-05-11: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation CheckUser. This issue affects CheckUser: from 1.45.0 before…
• CVE-2025-61658 - CVSS 4.3 (medium), 2026-02-03: Vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with program files src/GlobalContributions/GlobalContributionsPager.Php.…
• CVE-2025-67478 - CVSS 8.8 (high), 2026-02-03: Vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with program files includes/Mail/UserMailer.Php. This issue affects…
• CVE-2025-61651 - CVSS 6.1 (medium), 2026-02-03: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation CheckUser. This…
• CVE-2025-61648 - CVSS 6.1 (medium), 2026-02-03: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation CheckUser. This…
• CVE-2019-16529 - CVSS 5.3 (medium), 2020-03-19: An issue was discovered in the CheckUser extension through 1.35.0 for MediaWiki. Oversighted edit summaries are still visible in CheckUser results in…
• CVE-2019-18611 - CVSS 6.5 (medium), 2019-10-29: An issue was discovered in the CheckUser extension through 1.34 for MediaWiki. Certain sensitive information within oversighted edit summaries made available…
• CVE-2015-2940 - CVSS 6.8 (medium), 2015-04-13: Cross-site request forgery (CSRF) vulnerability in the CheckUser extension for MediaWiki allows remote attackers to hijack the authentication of certain users…