Wikimedia Foundation Mediawiki vulnerabilities
55 known vulnerabilities affecting wikimedia_foundation/mediawiki.
Total CVEs
55
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL2HIGH5MEDIUM33LOW8
Vulnerabilities
Page 3 of 3
CVE-2025-6597P4UNKNOWNCVSS 0.0≥ *, < 1.39.13, 1.42.7, 1.43.2, 1.44.02026-02-02
CVE-2025-6597 [NONE] CWE-22 CVE-2025-6597: Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files
Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/auth/AuthManager.Php.
This issue affects MediaWiki: from * before 1.39.13, 1.42.7, 1.43.2, 1.44.0.
nvd
CVE-2025-67479P4UNKNOWNCVSS 0.0≥ *, < 1.39.14, 1.43.4, 1.44.12026-02-03
CVE-2025-67479 [NONE] CVE-2025-67479: Vulnerability in Wikimedia Foundation MediaWiki, Wikimedia Foundation Cite. This vulnerability is as
Vulnerability in Wikimedia Foundation MediaWiki, Wikimedia Foundation Cite. This vulnerability is associated with program files includes/Parser/CoreParserFunctions.Php, includes/Parser/Sanitizer.Php.
This issue affects MediaWiki: from * before 1.39.14, 1.43.4, 1.44.1; Cite: from * before 1.39.14, 1.43.4, 1.44.1.
nvd
CVE-2025-32697P4UNKNOWNCVSS 0.0fixed in 1.42.6, 1.43.12025-04-10
CVE-2025-32697 [NONE] CWE-281 CVE-2025-32697: Improper Preservation of Permissions vulnerability in Wikimedia Foundation MediaWiki. This vulnerabi
Improper Preservation of Permissions vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/editpage/IntroMessageBuilder.Php, includes/Permissions/PermissionManager.Php, includes/Permissions/RestrictionStore.Php.
This issue affects MediaWiki: before 1.42.6, 1.43.1.
nvd
CVE-2025-32696P4UNKNOWNCVSS 0.0fixed in 1.39.12, 1.42.6, 1.43.12025-04-10
CVE-2025-32696 [NONE] CWE-281 CVE-2025-32696: Improper Preservation of Permissions vulnerability in Wikimedia Foundation MediaWiki. This vulnerabi
Improper Preservation of Permissions vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/actions/RevertAction.Php, includes/api/ApiFileRevert.Php.
This issue affects MediaWiki: before 1.39.12, 1.42.6, 1.43.1.
nvd
CVE-2025-6591P4UNKNOWNCVSS 0.0≥ *, < 1.39.13, 1.42.7 1.43.2, 1.44.02026-02-02
CVE-2025-6591 [NONE] CWE-79 CVE-2025-6591: Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files
Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/api/ApiFeedContributions.Php.
This issue affects MediaWiki: from * before 1.39.13, 1.42.7 1.43.2, 1.44.0.
nvd
CVE-2025-6927P4LOWCVSS 2.3≥ >= 1.42.0, < 1.39.13, 1.42.7 1.43.2, 1.44.02026-02-02
CVE-2025-6927 [LOW] CWE-22 CVE-2025-6927: Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files
Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/specials/pagers/BlockListPager.Php, includes/api/ApiQueryBlocks.Php.
This issue affects MediaWiki: from >= 1.42.0 before 1.39.13, 1.42.7 1.43.2, 1.44.0.
nvd
CVE-2025-3469P4UNKNOWNCVSS 0.0fixed in 1.39.12, 1.42.6, 1.43.12025-04-10
CVE-2025-3469 [NONE] CWE-79 CVE-2025-3469: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerab
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/htmlform/fields/HTMLMultiSelectField.Php.
This issue affects MediaWiki: before 1.39.12, 1.42.6, 1.43.1.
nvd
CVE-2025-6593P4LOWCVSS 2.1≥ 1.27.0, < 1.39.13, 1.42.7 1.43.2, 1.44.02026-02-02
CVE-2025-6593 [LOW] CWE-200 CVE-2025-6593: Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files
Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/user/User.Php.
This issue affects MediaWiki: from 1.27.0 before 1.39.13, 1.42.7 1.43.2, 1.44.0.
nvd
CVE-2026-34094P4LOWCVSS 3.8≥ *, < 1.43.7, 1.44.4, 1.45.22026-05-11
CVE-2026-34094 [LOW] CWE-668 CVE-2026-34094: Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program fil
Vulnerability in Wikimedia Foundation MediaWiki.
This vulnerability is associated with program files includes/Page/Article.Php.
This issue affects MediaWiki: from * before 1.43.7, 1.44.4, 1.45.2.
nvd
CVE-2025-61634P4LOWCVSS 3.1≥ *, < 1.39.14, 1.43.4, 1.44.12026-02-03
CVE-2025-61634 [LOW] CWE-22 CVE-2025-61634: Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files
Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Rest/Handler/PageHTMLHandler.Php.
This issue affects MediaWiki: from * before 1.39.14, 1.43.4, 1.44.1.
nvd
CVE-2025-61644P4UNKNOWNCVSS 0.0≥ *, < > fb856ce9cf121e046305116852cca4899ecb48ca2026-02-03
CVE-2025-61644 [NONE] CWE-79 CVE-2025-61644: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerab
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files resources/src/mediawiki.Rcfilters/ui/WatchlistTopSectionWidget.Js.
This issue affects MediaWiki: from * before > fb856ce9cf121e046305116852cca4899ecb48ca.
nvd
CVE-2025-32700P4LOWCVSS 2.3≥ >= 1.43.0, < 1.43.12025-04-10
CVE-2025-32700 [LOW] CWE-200 CVE-2025-32700: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Abu
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation AbuseFilter. This vulnerability is associated with program files includes/Api/QueryAbuseLog.Php, includes/Pager/AbuseLogPager.Php, includes/Special/SpecialAbuseLog.Php, includes/View/AbuseFilterViewExamine.Php.
This issue affects AbuseFilter: from >= 1.43.
nvd
CVE-2025-6589P4LOWCVSS 2.1v>= 1.42.02026-02-02
CVE-2025-6589 [LOW] CWE-22 CVE-2025-6589: Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files
Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/specials/pagers/BlockListPager.Php.
This issue affects MediaWiki: >= 1.42.0.
nvd
CVE-2025-32698P4LOWCVSS 2.1fixed in 1.39.12, 1.42.6, 1.43.12025-04-10
CVE-2025-32698 [LOW] CWE-200 CVE-2025-32698: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Med
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/logging/LogPager.Php.
This issue affects MediaWiki: before 1.39.12, 1.42.6, 1.43.1.
nvd
CVE-2025-32699P4LOWCVSS 2.1fixed in 1.39.12, 1.42.6, 1.43.12025-04-10
CVE-2025-32699 [LOW] CWE-74 CVE-2025-32699: Vulnerability in Wikimedia Foundation MediaWiki, Wikimedia Foundation Parsoid.This issue affects Med
Vulnerability in Wikimedia Foundation MediaWiki, Wikimedia Foundation Parsoid.This issue affects MediaWiki: before 1.39.12, 1.42.6, 1.43.1; Parsoid: before 0.16.5, 0.19.2, 0.20.2.
nvd
← Previous3 / 3