Mediawiki (Wikimedia Foundation) - vulnerabilities (CVEs)

55 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-07-01. Vendor: Wikimedia Foundation.

CVEs of Mediawiki

CVE-2026-58025 - CVSS 9.8 (critical), 2026-07-01: Deserialization of untrusted data vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files…
CVE-2026-58029 - CVSS 6.5 (medium), 2026-07-01: Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Api/ApiChangeAuthenticationData.Php,…
CVE-2026-58028 - CVSS 5.4 (medium), 2026-07-01: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki, Wikimedia…
CVE-2026-58026 - CVSS 5.7 (medium), 2026-07-01: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program…
CVE-2026-58032 - CVSS 6.1 (medium), 2026-07-01: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This…
CVE-2026-58033 - CVSS 6.5 (medium), 2026-07-01: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program…
CVE-2026-58037 - CVSS 6.1 (medium), 2026-07-01: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This…
CVE-2026-58036 - CVSS 7.5 (high), 2026-07-01: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program…
CVE-2026-58024 - CVSS 5.7 (medium), 2026-07-01: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program…
CVE-2026-58031 - CVSS 5.4 (medium), 2026-07-01: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This…
CVE-2026-58035 - CVSS 4.8 (medium), 2026-07-01: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This…
CVE-2026-34095 - CVSS 6.1 (medium), 2026-05-11: Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Actions/ActionEntryPoint.Php,…
CVE-2026-34094 - CVSS 3.8 (low), 2026-05-11: Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Page/Article.Php. This issue affects MediaWiki:…
CVE-2026-34093 - CVSS 5.3 (medium), 2026-05-11: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program…
CVE-2026-34088 - CVSS 7.5 (high), 2026-05-11: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This issue affects MediaWiki: from * before…
CVE-2026-34092 - CVSS 7.5 (high), 2026-05-11: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program…
CVE-2026-34091 - CVSS 7.5 (high), 2026-05-11: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This issue affects MediaWiki: from * before…
CVE-2025-67481 - CVSS 6.1 (medium), 2026-02-03: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This…
CVE-2025-67480 - CVSS 6.5 (medium), 2026-02-03: Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Api/ApiQueryRevisionsBase.Php. This issue…
CVE-2025-67484 - CVSS 9.8 (critical), 2026-02-03: Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Api/ApiFormatXml.Php. This issue affects…
CVE-2025-67483 - CVSS 6.1 (medium), 2026-02-03: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This…
CVE-2025-67476 - CVSS 4.3 (medium), 2026-02-03: Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Import/ImportableOldRevisionImporter.Php. This…
CVE-2025-67475 - CVSS 6.1 (medium), 2026-02-03: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This…
CVE-2025-67479 - CVSS 0 (none), 2026-02-03: Vulnerability in Wikimedia Foundation MediaWiki, Wikimedia Foundation Cite. This vulnerability is associated with program files…
CVE-2025-67477 - CVSS 6.1 (medium), 2026-02-03: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This…
CVE-2025-61645 - CVSS 6.1 (medium), 2026-02-03: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This…
CVE-2025-61646 - CVSS 5.4 (medium), 2026-02-03: Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/RecentChanges/EnhancedChangesList.Php. This…
CVE-2025-11261 - CVSS 6.1 (medium), 2026-02-03: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This…
CVE-2025-61643 - CVSS 6.1 (medium), 2026-02-03: Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/recentchanges/RecentChangeRCFeedNotifier.Php.…
CVE-2025-61642 - CVSS 6.1 (medium), 2026-02-03: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This…
CVE-2025-61641 - CVSS 6.1 (medium), 2026-02-03: Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/api/ApiQueryAllPages.Php. This issue affects…
CVE-2025-61644 - CVSS 0 (none), 2026-02-03: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This…
CVE-2025-61637 - CVSS 4.8 (medium), 2026-02-03: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This…
CVE-2025-61640 - CVSS 4.8 (medium), 2026-02-03: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This…
CVE-2025-61636 - CVSS 4.8 (medium), 2026-02-03: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This…
CVE-2025-61639 - CVSS 4.8 (medium), 2026-02-03: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program…
CVE-2025-61638 - CVSS 4.8 (medium), 2026-02-03: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki, Wikimedia…
CVE-2025-61634 - CVSS 3.1 (low), 2026-02-03: Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Rest/Handler/PageHTMLHandler.Php. This issue…
CVE-2025-6597 - CVSS 0 (none), 2026-02-02: Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/auth/AuthManager.Php. This issue affects…
CVE-2025-6594 - CVSS 4.7 (medium), 2026-02-02: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This…
CVE-2025-6927 - CVSS 2.3 (low), 2026-02-02: Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/specials/pagers/BlockListPager.Php,…
CVE-2025-6591 - CVSS 0 (none), 2026-02-02: Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/api/ApiFeedContributions.Php. This issue affects…
CVE-2025-6590 - CVSS 4.6 (medium), 2026-02-02: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program…
CVE-2025-6589 - CVSS 2.1 (low), 2026-02-02: Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/specials/pagers/BlockListPager.Php. This issue…
CVE-2025-6593 - CVSS 2.1 (low), 2026-02-02: Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/user/User.Php. This issue affects MediaWiki:…
CVE-2025-3469 - CVSS 0 (none), 2025-04-10: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This…
CVE-2025-32700 - CVSS 2.3 (low), 2025-04-10: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation AbuseFilter. This vulnerability is associated with program…
CVE-2025-32698 - CVSS 2.1 (low), 2025-04-10: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program…
CVE-2025-32697 - CVSS 0 (none), 2025-04-10: Improper Preservation of Permissions vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files…
CVE-2025-32696 - CVSS 0 (none), 2025-04-10: Improper Preservation of Permissions vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files…
CVE-2025-32699 - CVSS 2.1 (low), 2025-04-10: Vulnerability in Wikimedia Foundation MediaWiki, Wikimedia Foundation Parsoid.This issue affects MediaWiki: before 1.39.12, 1.42.6, 1.43.1; Parsoid: before…
CVE-2013-4572 - CVSS 7.5 (high), 2020-02-06: The CentralNotice extension for MediaWiki before 1.19.9, 1.20.x before 1.20.8, and 1.21.x before 1.21.3 sets the Cache-Control header to cache session cookies…
CVE-2013-6455 - CVSS 5.3 (medium), 2020-01-28: The CentralAuth extension for MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to obtain usernames via vectors…
CVE-2013-6451 - CVSS 6.1 (medium), 2020-01-28: Cross-site scripting (XSS) vulnerability in MediaWiki 1.19.9 before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to inject…
CVE-2013-4303 - CVSS 6.1 (medium), 2019-12-11: includes/libs/IEUrlExtension.php in the MediaWiki API in MediaWiki 1.19.x before 1.19.8, 1.20.x before 1.20.7, and 1.21.x before 1.21.2 does not properly…