Mediawiki Checkuser vulnerabilities

• mediawiki checkuser An issue was discovered in the CheckUser extension for MediaWiki through 1.39.3. Special... CVE-2023-37252 3.1 LowSeptember 14, 2026
• mediawiki checkuser Suggested investigations: Handle suppressed usernames CVE-2026-34090 4.8 MediumApril 3, 2026
• mediawiki checkuser Special:GlobalContributions shows edits on wikis the viewer doesn't have access to CVE-2025-61658 1.3 LowFebruary 3, 2026
• mediawiki checkuser i18n XSS through Special:CheckUser CheckUser helper CVE-2025-61651 0.0 NoneFebruary 3, 2026
• mediawiki checkuser Stored XSS through system messages in CheckUser CVE-2025-61648 0.0 NoneFebruary 3, 2026
• mediawiki checkuser Wrong E-Mail address composition for usernames with a comma and Umlauts in it like "Döe, Jähn" CVE-2025-67478 Fix available 0.0 NoneDecember 19, 2025
• mediawiki checkuser An issue was discovered in the CheckUser extension through 1.35.0 for MediaWiki. Oversighted edit... CVE-2019-16529 5.3 MediumMarch 19, 2020
• mediawiki checkuser An issue was discovered in the CheckUser extension through 1.34 for MediaWiki. Certain sensitive... CVE-2019-18611 6.5 MediumOctober 29, 2019
• mediawiki checkuser Cross-site request forgery (CSRF) vulnerability in the CheckUser extension for MediaWiki allows... CVE-2015-2940 Fix available 6.8 MediumApril 9, 2015