mediawiki Vulnerability Advisory Catalog

Total 451 security vulnerabilities recorded for mediawiki software and firmware.

← Back to All Vendors
CVE-2026-14363 CRITICAL
Component: cargo

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in The Wikimedia Foundation Mediawiki - Cargo Exten...

📅 2026-07-01
CVSS 9.8 Dossier →
Component: mediawiki

Improper neutralization of input terminators vulnerability in The Wikimedia Foundation Mediawiki - WikiLambda Extension allows Authentication Bypass. ...

📅 2026-07-01
CVSS 4.3 Dossier →
Component: mediawiki

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - Charts Exte...

📅 2026-07-01
CVSS 6.1 Dossier →
CVE-2026-58521 CRITICAL
Component: cargo

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in The Wikimedia Foundation Mediawiki - Cargo Exten...

📅 2026-07-01
CVSS 9.8 Dossier →
Component: mediawiki

URL redirection to untrusted site ('open redirect') vulnerability in The Wikimedia Foundation Mediawiki - UrlShortener Extension allows Cross-Site Fla...

📅 2026-07-01
CVSS 6.1 Dossier →
Component: mediawiki

A vulnerability in Wikimedia Foundation timeline. This vulnerability is associated with program files scripts/EasyTimeline.Pl, includes/Timeline.Php...

📅 2026-07-01
CVSS 8.8 Dossier →
Component: mediawiki

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation timeline. This vul...

📅 2026-07-01
CVSS 6.1 Dossier →
Component: mediawiki

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vu...

📅 2026-07-01
CVSS 6.1 Dossier →
Component: mediawiki

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with pr...

📅 2026-07-01
CVSS 7.5 Dossier →
Component: mediawiki

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with pr...

📅 2026-07-01
CVSS 6.5 Dossier →
Component: mediawiki

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vu...

📅 2026-07-01
CVSS 6.1 Dossier →
Component: mediawiki

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation SyntaxHighlight_GeSH...

📅 2026-07-01
CVSS 6.1 Dossier →
Component: mediawiki

Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Api/ApiChangeAuthenticationData.Php, i...

📅 2026-07-01
CVSS 6.5 Dossier →
Component: mediawiki

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki, Wikimedia...

📅 2026-07-01
CVSS 5.4 Dossier →
Component: mediawiki

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation AbuseFilter. This vulnerability is associated with ...

📅 2026-07-01
CVSS 6.5 Dossier →
Component: mediawiki

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with pr...

📅 2026-07-01
CVSS 5.7 Dossier →
CVE-2026-58025 CRITICAL
Component: mediawiki

Deserialization of untrusted data vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Impo...

📅 2026-07-01
CVSS 9.8 Dossier →
Component: mediawiki

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with pr...

📅 2026-07-01
CVSS 5.7 Dossier →
Component: mediawiki

Session fixation vulnerability in Wikimedia Foundation OAuth. This vulnerability is associated with program files src/Backend/MWOAuthServer.Php. ...

📅 2026-07-01
CVSS 7.6 Dossier →
Component: mediawiki

Improper input validation vulnerability in Wikimedia Foundation UrlShortener. This vulnerability is associated with program files includes/UrlShorte...

📅 2026-07-01
CVSS 8.8 Dossier →
Component: mediawiki

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vu...

📅 2026-07-01
CVSS 4.8 Dossier →
Component: mediawiki

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation CheckUser. This vu...

📅 2026-07-01
CVSS 4.8 Dossier →
Component: mediawiki

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vu...

📅 2026-07-01
CVSS 5.4 Dossier →
Component: cargo

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - Cargo Exten...

📅 2026-07-01
CVSS 5.4 Dossier →
Page 1 of 19 (451 Total Records)