cbcvebase.

Wikimedia Foundation Checkuser vulnerabilities

9 known vulnerabilities affecting wikimedia_foundation/checkuser.

Total CVEs
9
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH2MEDIUM4LOW3

Vulnerabilities

Page 1 of 1
CVE-2025-67478P3HIGHCVSS 8.8≥ *, < 1.39.14, 1.43.4, 1.44.12026-02-03
CVE-2025-67478 [HIGH] CVE-2025-67478: Vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with program files Vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with program files includes/Mail/UserMailer.Php. This issue affects CheckUser: from * before 1.39.14, 1.43.4, 1.44.1.
nvd
CVE-2026-34090P3HIGHCVSS 7.5≥ 1.45.0, < 1.45.22026-05-11
CVE-2026-34090 [HIGH] CWE-200 CVE-2026-34090: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Che Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation CheckUser. This issue affects CheckUser: from 1.45.0 before 1.45.2.
nvd
CVE-2025-61651P4MEDIUMCVSS 6.1≥ *, < 1.44.12026-02-03
CVE-2025-61651 [MEDIUM] CWE-79 CVE-2025-61651: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerab Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with program files modules/ext.CheckUser/checkuser/checkUserHelper/buildUserElement.Js. This issue affects CheckUser: from * before 1.44.1.
nvd
CVE-2025-61648P4MEDIUMCVSS 6.1≥ *, < 1.44.12026-02-03
CVE-2025-61648 [MEDIUM] CWE-79 CVE-2025-61648: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerab Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with program files modules/ext.CheckUser.TempAccounts/components/ShowIPButton.Vue, modules/ext.CheckUser.TempAccounts/SpecialBlock.Js. This issue affects CheckUser: from * befor
nvd
CVE-2025-61658P4MEDIUMCVSS 4.3≥ *, < 1.43.4, 1.44.12026-02-03
CVE-2025-61658 [MEDIUM] CWE-22 CVE-2025-61658: Vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with program files Vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with program files src/GlobalContributions/GlobalContributionsPager.Php. This issue affects CheckUser: from * before 1.43.4, 1.44.1.
nvd
CVE-2026-58034P4MEDIUMCVSS 4.8≥ 1.46.0-rc.0, < 1.46.02026-07-01
CVE-2026-58034 [MEDIUM] CWE-79 CVE-2026-58034: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerab Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with program files modules/ext.CheckUser.TempAccounts/components/blockConnectedTempAccountsField.Vue. This issue affects CheckUser: from 1.46.0-rc.0 before 1.46.0.
nvd
CVE-2025-61647P4LOWCVSS 0.4≥ a3dc1bbcc33acbcca6831d6afaccbb1054c93a57, 0584eb2ad564648aa3ce9c555dd044dda02b55f4, < *2026-02-03
CVE-2025-61647 [LOW] CWE-22 CVE-2025-61647: Vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with program files Vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with program files src/Api/Rest/Handler/UserInfoHandler.Php. This issue affects CheckUser: from a3dc1bbcc33acbcca6831d6afaccbb1054c93a57, 0584eb2ad564648aa3ce9c555dd044dda02b55f4.
nvd
CVE-2025-61649P4LOWCVSS 1.1≥ 7cedd58781d261f110651b6af4f41d2d11ae7309, < *2026-02-03
CVE-2025-61649 [LOW] CWE-22 CVE-2025-61649: Vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with program files Vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with program files src/Services/CheckUserUserInfoCardService.Php. This issue affects CheckUser: from 7cedd58781d261f110651b6af4f41d2d11ae7309.
nvd
CVE-2025-61650P4LOWCVSS 1.1≥ *, < 795bf333272206a0189050d975e94b70eb7dc5072026-02-03
CVE-2025-61650 [LOW] CWE-79 CVE-2025-61650: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerab Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with program files src/Services/CheckUserUserInfoCardService.Php. This issue affects CheckUser: from * before 795bf333272206a0189050d975e94b70eb7dc507.
nvd
Wikimedia Foundation Checkuser vulnerabilities | cvebase