MediaWiki vulnerabilities

CVEs per yearBy the year they were published

1. 20184
2. 201811
3. 20192
4. 20191
5. 20261
6. 20263

Newest CVEs

• CVE-2024-23176

  An issue was discovered in the MassMessage extension in MediaWiki before 1.40.2. For a Special:MassMessage?uselang=x-xss URL, the i18n key…

  MediaWiki · MassMessage

  Medium5.4
• CVE-2023-37253

  An issue was discovered in the ProofreadPage extension for MediaWiki through 1.39.3. It leaks information about a suppressed user via the API and config…

  MediaWiki · ProofreadPage

  Low3.1
• CVE-2023-37252

  An issue was discovered in the CheckUser extension for MediaWiki through 1.39.3. Special:CheckUserLog shows usernames that have been hidden.

  MediaWiki · CheckUser

  Low3.1
• CVE-2023-3550

  Stored XSS leads to privilege escalation in MediaWiki v1.40.0

  MediaWiki · MediaWiki

  High7.3
• CVE-2013-1817

  MediaWiki before 1.19.4 and 1.20.x before 1.20.3 contains an error in the api.php script which allows remote attackers to obtain sensitive information.

  mediawiki · mediawiki

  High7.5
• CVE-2013-1816

  MediaWiki before 1.19.4 and 1.20.x before 1.20.3 allows remote attackers to cause a denial of service (application crash) by sending a specially crafted…

  mediawiki · mediawiki

  High7.5
• CVE-2012-0046

  mediawiki allows deleted text to be exposed

  mediawiki · mediawiki

  High7.5
• CVE-2018-13258

  Tarball was missing .htaccess files

  mediawiki · mediawiki

  Medium5.3
• CVE-2018-0505

  BotPasswords can bypass CentralAuth's account lock

  mediawiki · mediawiki

  Medium6.5
• CVE-2018-0504

  Information disclosure in Special:Redirect/logid

  mediawiki · mediawiki

  Medium6.5