Read the docs

mediawiki

Records456All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical20CVSS 9.0–10.0
CVSS high70CVSS 7.0–8.9

Exploited now

mediawiki records in CISA KEV

No mediawiki vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Mediawiki 417 records HIGH Cargo 10 records HIGH Checkuser 8 records LOW Abusefilter 3 records LOW Visual Editor 3 records LOW Mobilefrontend 2 records LOW Createredirect 1 record LOW Matomo 1 record LOW

Records

8 records in Checkuser · all components

TI-2015-02594 CVE-2015-2940 · GHSA-g77q-mpv6-8w22

Cross-site request forgery (CSRF) vulnerability in the CheckUser extension for MediaWiki…

Priority LOW 32

Cross-site request forgery (CSRF) vulnerability in the CheckUser extension for MediaWiki allows remote attackers to hijack the authentication of certain users for requests that retrieve sensitive user information via uns…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01095 Published 2015-04-13 No fix listed CWE-352
TI-2026-26412 CVE-2026-34090 · GHSA-cg3w-6fh3-65mw

Suggested investigations: Handle suppressed usernames

Priority LOW 22

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation CheckUser.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.0028 Published 2026-05-11 Fixed in 1.45.2 CWE-200
TI-2025-38085 CVE-2025-61651 · GHSA-rq75-xpj3-jxm4

i18n XSS through Special:CheckUser CheckUser helper

Priority LOW 2

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation CheckUser.

CVSS 4.0N/A 0.0 Network High privileges No interaction EPSS 0.00215 Published 2026-02-03 Fixed in 1.44.1 CWE-79
TI-2025-38082 CVE-2025-61648 · GHSA-c7fq-95j5-94xc

Stored XSS through system messages in CheckUser

Priority LOW 2

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation CheckUser.

CVSS 4.0N/A 0.0 Network High privileges No interaction EPSS 0.00177 Published 2026-02-03 Fixed in 1.44.1 CWE-79
Open these records in search →