mediawiki Vulnerability Advisory Catalog

Total 451 security vulnerabilities recorded for mediawiki software and firmware.

← Back to All Vendors
Component: mediawiki

Cross-Site request forgery (CSRF) vulnerability in The Wikimedia Foundation Mediawiki - RedirectManager Extension allows Cross Site Request Forgery. ...

📅 2026-07-01
CVSS 6.3 Dossier →
Component: mediawiki

Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Actions/ActionEntryPoint.Php, includes...

📅 2026-05-11
CVSS 6.1 Dossier →
Component: mediawiki

Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Page/Article.Php. This issue affect...

📅 2026-05-11
CVSS 3.8 Dossier →
Component: mediawiki

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with pr...

📅 2026-05-11
CVSS 5.3 Dossier →
Component: mediawiki

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with pr...

📅 2026-05-11
CVSS 7.5 Dossier →
Component: mediawiki

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This issue affects MediaWiki: from * befo...

📅 2026-05-11
CVSS 7.5 Dossier →
Component: checkuser

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation CheckUser. This issue affects CheckUser: from 1.45.0...

📅 2026-05-11
CVSS 7.5 Dossier →
Component: mediawiki

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This issue affects MediaWiki: from * befo...

📅 2026-05-11
CVSS 7.5 Dossier →
Component: mediawiki

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation OATHAuth. This issue affects OATHAuth: from * before...

📅 2026-05-11
CVSS 7.5 Dossier →
Component: cargo

Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Wikimedia Foundation Mediawiki - Cargo Extension allows...

📅 2026-04-07
CVSS 6.1 Dossier →
Component: cargo

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Wikimedia Foundation Mediawiki - Cargo Extension...

📅 2026-04-07
CVSS 6.1 Dossier →
Component: cargo

Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Wikimedia Foundation Mediawiki - Cargo Extension allows...

📅 2026-04-07
CVSS 6.1 Dossier →
Component: cargo

Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in WikiWorks Mediawiki - Cargo Extension allows Stored XSS...

📅 2026-04-07
CVSS 5.4 Dossier →
CVE-2025-67484 CRITICAL
Component: mediawiki

Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Api/ApiFormatXml.Php. This issue affect...

📅 2026-02-03
CVSS 9.8 Dossier →
Component: mediawiki

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vuln...

📅 2026-02-03
CVSS 6.1 Dossier →
Component: mediawiki

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vuln...

📅 2026-02-03
CVSS 6.1 Dossier →
Component: mediawiki

Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Api/ApiQueryRevisionsBase.Php. This iss...

📅 2026-02-03
CVSS 6.5 Dossier →
Component: checkuser

Vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with program files includes/Mail/UserMailer.Php. This issue affects...

📅 2026-02-03
CVSS 8.8 Dossier →
Component: mediawiki

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vuln...

📅 2026-02-03
CVSS 6.1 Dossier →
Component: mediawiki

Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Import/ImportableOldRevisionImporter.Php...

📅 2026-02-03
CVSS 4.3 Dossier →
Component: mediawiki

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vuln...

📅 2026-02-03
CVSS 6.1 Dossier →
Component: checkuser

Vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with program files src/GlobalContributions/GlobalContributionsPager....

📅 2026-02-03
CVSS 4.3 Dossier →
Component: visual_editor

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation VisualEditor. This v...

📅 2026-02-03
CVSS 6.1 Dossier →
Component: visual_editor

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation VisualEditor. This v...

📅 2026-02-03
CVSS 6.1 Dossier →
Page 2 of 19 (451 Total Records)