Skip to contentMediawiki vulnerabilities
Newest
- mediawikiAn issue was discovered in the SportsTeams extension for MediaWiki before 1.35.12, 1.36.x through...CVE-2023-45370Fix available5.3 Medium
- mediawikiAn issue was discovered in the PageTriage extension for MediaWiki before 1.35.12, 1.36.x through...CVE-2023-45369Fix available4.3 Medium
- mediawikiAn issue was discovered in the CheckUser extension for MediaWiki before 1.35.12, 1.36.x through 1...CVE-2023-45367Fix available6.5 Medium
- mediawiki, debian linux +1 moreAn issue was discovered in includes/page/Article.php in MediaWiki 1.36.x through 1.39.x before 1...CVE-2023-45364Fix available5.3 Medium
- mediawiki, debian linux +1 moreMediaWiki Denial of Service vulnerabilityCVE-2023-45363Fix availableEPSS 23.8%7.5 High
- mediawiki, debian linux +1 moreStored XSS leads to privilege escalation in MediaWiki v1.40.0CVE-2023-3550Fix available7.3 High
- mediawikiAn issue was discovered in MediaWiki before 1.35.11, 1.36.x through 1.38.x before 1.38.7, 1.39.x...CVE-2023-36674Fix available5.3 Medium
- mediawikiAn issue was discovered in the ProofreadPage (aka Proofread Page) extension for MediaWiki through...CVE-2023-37305Fix available5.3 Medium
- mediawikiAn issue was discovered in the DoubleWiki extension for MediaWiki through 1.39.3. includes...CVE-2023-37304Fix available5.4 Medium
- mediawikiAn issue was discovered in the CheckUser extension for MediaWiki through 1.39.3. In certain...CVE-2023-37303Fix available9.8 Critical
- mediawikiMediaWiki Cross-site Scripting vulnerabilityCVE-2023-37302Fix available6.1 Medium
- mediawikiAn issue was discovered in SubmitEntityAction in Wikibase in MediaWiki through 1.39.3. Because it...CVE-2023-37301Fix available5.3 Medium
- mediawikiAn issue was discovered in the CheckUserLog API in the CheckUser extension for MediaWiki through...CVE-2023-37300Fix available5.3 Medium
- mediawikiAn issue was discovered in the Cargo extension for MediaWiki through 1.39.3. It allows one to...CVE-2023-37256Fix available6.1 Medium
- mediawikiAn issue was discovered in the CheckUser extension for MediaWiki through 1.39.3. In Special...CVE-2023-37255Fix available6.1 Medium
- mediawikiAn issue was discovered in the Cargo extension for MediaWiki through 1.39.3. XSS can occur in...CVE-2023-37254Fix available6.1 Medium
- mediawikiAn issue was discovered in the GoogleAnalyticsMetrics extension for MediaWiki through 1.39.3. The...CVE-2023-37251Fix available6.1 Medium
- mediawikiAn issue was discovered in MediaWiki before 1.35.11, 1.36.x through 1.38.x before 1.38.7, 1.39.x...CVE-2023-36675Fix available6.1 Medium
- mediawikiAn issue was discovered in MediaWiki before 1.35.8, 1.36.x and 1.37.x before 1.37.5, and 1.38.x...CVE-2022-41766Fix available4.3 Medium
- mediawikiAn issue was discovered in the VisualEditor extension in MediaWiki before 1.31.13, and 1.32.x...CVE-2021-30153Fix available4.3 Medium
- mediawiki scoreThe Score extension through 0.3.0 for MediaWiki has a remote code execution vulnerability due to...CVE-2020-29007Public exploit9.8 Critical
- mediawiki, fedoraproject fedora +1 moreX-Forwarded-For header allows brute-forcing autoblocked IP addressesCVE-2023-29141Fix available9.8 Critical
- mediawikiAn issue was discovered in the GrowthExperiments extension for MediaWiki through 1.39.3....CVE-2023-29140Fix available5.3 Medium
- mediawikiAn issue was discovered in the CheckUser extension for MediaWiki through 1.39.3. When a user with...CVE-2023-29139Fix available6.5 Medium
- mediawikiAn issue was discovered in the GrowthExperiments extension for MediaWiki through 1.39.3. The...CVE-2023-29137Fix available4.3 Medium
- daschtour matomo-mediawiki-extension, mediawiki matomo +1 moreDaSchTour matomo-mediawiki-extension Username Piwik.hooks.php cross site scriptingCVE-2017-20175Fix available2.6 Low
- mediawikiAn issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39...CVE-2023-22912Fix available5.3 Medium
- mediawikiAn issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39...CVE-2023-22910Fix available5.4 Medium
- mediawikiAn issue was discovered in the CheckUser extension for MediaWiki through 1.39.x. Various...CVE-2022-39193Fix available5.3 Medium
- mediawiki wikisource category browser, wikisource category browser +1 moreWikisource Category Browser index.php cross site scriptingCVE-2015-100583.5 Low
- mediawiki, fedoraproject fedora +1 moreAn issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39...CVE-2022-47927Fix available5.5 Medium
- mediawiki, fedoraproject fedora +1 moreIn the GrowthExperiments extension for MediaWiki through 1.39, the growthmanagementorlist API...CVE-2023-22945Fix available4.3 Medium
- mediawiki, fedoraproject fedora +1 moreAn issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39...CVE-2023-22911Fix available6.1 Medium
- mediawiki, fedoraproject fedora +1 moreAn issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39...CVE-2023-22909Fix available5.3 Medium
- unspecified semanticdrilldown extension, mediawiki semantic drilldown +1 moreSemanticDrilldown Extension GET Parameter SDBrowseDataPage.php printFilterLine cross site scriptingCVE-2022-45613.5 Low
- mediawikiAn issue was discovered in MediaWiki before 1.35.8, 1.36.x and 1.37.x before 1.37.5, and 1.38.x...CVE-2022-41767Fix available5.3 Medium
- mediawikiAn issue was discovered in MediaWiki before 1.35.8, 1.36.x and 1.37.x before 1.37.5, and 1.38.x...CVE-2022-41765Fix available5.3 Medium
- mediawikiAn issue was discovered in the MediaWiki through 1.38.2. The community configuration pages for...CVE-2022-39194Fix available4.9 Medium
- mediawiki, fedoraproject fedora +1 moreAn issue was discovered in MediaWiki before 1.37.3 and 1.38.x before 1.38.1. The contributions...CVE-2022-34912Fix available6.1 Medium
- mediawiki, fedoraproject fedora +1 moreAn issue was discovered in MediaWiki before 1.35.7, 1.36.x and 1.37.x before 1.37.3, and 1.38.x...CVE-2022-34911Fix available6.1 Medium
- mediawikiAn issue was discovered in MediaWiki through 1.38.1. The lemma length of a Wikibase lexeme is...CVE-2022-34750Fix available7.5 High
- mediawiki rss for mediawikiThe RSS extension before 2022-04-29 for MediaWiki allows XSS via an rss element (if the feed is...CVE-2022-299696.1 Medium
- mediawikiAn issue was discovered in MediaWiki through 1.37.2. The SecurePoll extension allows a leak...CVE-2022-28323Fix available7.5 High
- mediawikiThe Private Domains extension for MediaWiki through 1.37.2 (before...CVE-2022-29903Fix available4.3 Medium
- mediawikiThe SemanticDrilldown extension for MediaWiki through 1.37.2 (before...CVE-2022-29904Fix availableEPSS 16.8%9.8 Critical
- mediawikiThe FanBoxes extension for MediaWiki through 1.37.2 (before...CVE-2022-29905Fix available4.3 Medium
- mediawikiThe admin API module in the QuizGame extension for MediaWiki through 1.37.2 (before...CVE-2022-29906Fix available9.8 Critical
- mediawikiThe Nimbus skin for MediaWiki through 1.37.2 (before 6f9c8fb868345701d9544a54d9752515aace39df)...CVE-2022-29907Fix available6.1 Medium
- mediawiki createredirectThe CreateRedirect extension before 2022-04-14 for MediaWiki does not properly check whether the...CVE-2022-295477.5 High
- mediawikiA denial-of-service issue was discovered in MediaWiki 1.37.x before 1.37.2. Rendering of w/index...CVE-2022-28204Fix available7.5 High
- Show moreLoading…