Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

8 records

Vendor: mediawiki Component: Checkuser Clear all filters
TI-2026-26412 CVE-2026-34090 · GHSA-cg3w-6fh3-65mw

Suggested investigations: Handle suppressed usernames

Priority LOW 22

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation CheckUser.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.0028 Published 2026-05-11 Fixed in 1.45.2 CWE-200
TI-2025-38085 CVE-2025-61651 · GHSA-rq75-xpj3-jxm4

i18n XSS through Special:CheckUser CheckUser helper

Priority LOW 2

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation CheckUser.

CVSS 4.0N/A 0.0 Network High privileges No interaction EPSS 0.00215 Published 2026-02-03 Fixed in 1.44.1 CWE-79
TI-2025-38082 CVE-2025-61648 · GHSA-c7fq-95j5-94xc

Stored XSS through system messages in CheckUser

Priority LOW 2

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation CheckUser.

CVSS 4.0N/A 0.0 Network High privileges No interaction EPSS 0.00177 Published 2026-02-03 Fixed in 1.44.1 CWE-79
TI-2015-02594 CVE-2015-2940 · GHSA-g77q-mpv6-8w22

Cross-site request forgery (CSRF) vulnerability in the CheckUser extension for MediaWiki…

Priority LOW 32

Cross-site request forgery (CSRF) vulnerability in the CheckUser extension for MediaWiki allows remote attackers to hijack the authentication of certain users for requests that retrieve sensitive user information via uns…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01095 Published 2015-04-13 No fix listed CWE-352