Read the docs

Wikimedia Foundation

Records256All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical7CVSS 9.0–10.0
CVSS high19CVSS 7.0–8.9

Exploited now

Wikimedia Foundation records in CISA KEV

No Wikimedia Foundation vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wikidata Query Gui 3 records LOW Parsoid 2 records LOW Wikimedia-extensions-css 2 records HIGH Analytics-quarry-web 1 record LOW Apex 1 record HIGH Campaignevents 1 record LOW Mediawiki-extensions-i18ntags 1 record LOW Mediawiki-extensions-uploadwizard 1 record LOW

Records

1 record in Campaignevents · all components

TI-2026-00599 CVE-2026-0817 · GHSA-5v56-6x55-vhpv

CampaignEvents API missing authorization exposes meeting and chat URLs

Priority LOW 30

Missing Authorization vulnerability in Wikimedia Foundation MediaWiki - CampaignEvents extension allows Privilege Abuse.This issue affects MediaWiki - CampaignEvents extension: 1.45, 1.44, 1.43, 1.39.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00272 Published 2026-01-09 No fix listed CWE-862
Open these records in search →