Mediawiki - vulnerabilities (CVEs)

459 CVEs in 23 products, 0 in the last 30 days, newest from 2026-09-14.

Products

Mediawiki - 419 CVEs
Cargo - 10 CVEs
Checkuser - 9 CVEs
Abusefilter - 3 CVEs
Visual Editor - 3 CVEs
Mobilefrontend - 2 CVEs
Createredirect - 1 CVEs
Massmessage - 1 CVEs
Matomo - 1 CVEs
Mediawik - 1 CVEs
Mediawiki Botquery Ext - 1 CVEs
Mediawiki Syntaxhighlight Extension - 1 CVEs
Metrolook Skin - 1 CVEs
Proofreadpage - 1 CVEs
Rss For Mediawiki - 1 CVEs
Rssreader - 1 CVEs
Score - 1 CVEs
Scribunto - 1 CVEs
Semantic Drilldown - 1 CVEs
Shortdescription - 1 CVEs
Skin\ - 1 CVEs
Vector Skin - 1 CVEs
Wikisource Category Browser - 1 CVEs

Newest CVEs of Mediawiki

CVE-2023-37252 - CVSS 3.1 (low), 2026-09-14: An issue was discovered in the CheckUser extension for MediaWiki through 1.39.3. Special:CheckUserLog shows usernames that have been hidden.
CVE-2023-37253 - CVSS 3.1 (low), 2026-09-14: An issue was discovered in the ProofreadPage extension for MediaWiki through 1.39.3. It leaks information about a suppressed user via the API and config…
CVE-2024-23176 - CVSS 5.4 (medium), 2026-09-14: An issue was discovered in the MassMessage extension in MediaWiki before 1.40.2. For a Special:MassMessage?uselang=x-xss URL, the i18n key…
CVE-2026-14363 - CVSS 9.8 (critical), 2026-07-01: Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in The Wikimedia Foundation Mediawiki - Cargo Extension…
CVE-2026-14358 - CVSS 6.9 (medium), 2026-07-01: Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - Charts Extension…
CVE-2026-58517 - CVSS 6.9 (medium), 2026-07-01: Improper neutralization of input terminators vulnerability in The Wikimedia Foundation Mediawiki - WikiLambda Extension allows Authentication Bypass. This…
CVE-2026-58521 - CVSS 9.8 (critical), 2026-07-01: Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in The Wikimedia Foundation Mediawiki - Cargo Extension…
CVE-2026-58520 - CVSS 6.9 (medium), 2026-07-01: URL redirection to untrusted site ('open redirect') vulnerability in The Wikimedia Foundation Mediawiki - UrlShortener Extension allows Cross-Site Flashing.…
CVE-2026-58025 - CVSS 9.8 (critical), 2026-07-01: Deserialization of untrusted data vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files…
CVE-2026-58029 - CVSS 6.5 (medium), 2026-07-01: Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Api/ApiChangeAuthenticationData.Php,…
CVE-2026-58028 - CVSS 5.4 (medium), 2026-07-01: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki, Wikimedia…
CVE-2026-58026 - CVSS 5.7 (medium), 2026-07-01: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program…
CVE-2026-8857 - CVSS 8.8 (high), 2026-07-01: A vulnerability in Wikimedia Foundation timeline. This vulnerability is associated with program files scripts/EasyTimeline.Pl, includes/Timeline.Php. This…
CVE-2026-58038 - CVSS 6.1 (medium), 2026-07-01: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation timeline. This vulnerability…
CVE-2026-58027 - CVSS 6.5 (medium), 2026-07-01: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation AbuseFilter. This vulnerability is associated with program…
CVE-2026-58030 - CVSS 6.1 (medium), 2026-07-01: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation SyntaxHighlight_GeSHi. This…
CVE-2026-58032 - CVSS 6.1 (medium), 2026-07-01: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This…
CVE-2026-58033 - CVSS 6.5 (medium), 2026-07-01: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program…
CVE-2026-58037 - CVSS 6.1 (medium), 2026-07-01: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This…
CVE-2026-58036 - CVSS 7.5 (high), 2026-07-01: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program…
CVE-2026-58024 - CVSS 5.7 (medium), 2026-07-01: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program…
CVE-2026-13707 - CVSS 7.6 (high), 2026-07-01: Session fixation vulnerability in Wikimedia Foundation OAuth. This vulnerability is associated with program files src/Backend/MWOAuthServer.Php. This issue…
CVE-2026-13706 - CVSS 8.8 (high), 2026-07-01: Improper input validation vulnerability in Wikimedia Foundation UrlShortener. This vulnerability is associated with program files…
CVE-2026-58031 - CVSS 5.4 (medium), 2026-07-01: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This…
CVE-2026-58034 - CVSS 4.8 (medium), 2026-07-01: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation CheckUser. This…
CVE-2026-58035 - CVSS 4.8 (medium), 2026-07-01: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This…
CVE-2026-58519 - CVSS 6.9 (medium), 2026-07-01: Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - Cargo Extension…
CVE-2026-58518 - CVSS 6.9 (medium), 2026-07-01: Cross-Site request forgery (CSRF) vulnerability in The Wikimedia Foundation Mediawiki - RedirectManager Extension allows Cross Site Request Forgery. This…
CVE-2026-34094 - CVSS 3.8 (low), 2026-05-11: Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Page/Article.Php. This issue affects MediaWiki:…
CVE-2026-34095 - CVSS 6.1 (medium), 2026-05-11: Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Actions/ActionEntryPoint.Php,…