CveMateVulnerability intelligence

The Wikimedia Foundation vulnerabilities

98 vulnerabilities

Known vulnerabilities in The Wikimedia Foundation products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 76 products.

Products

49 of 76

Mediawiki Cargo Extension10 vulnerabilities
Mediawiki Growthexperiments Extension4 vulnerabilities
Mediawiki Wikilambda Extension4 vulnerabilities
Mediawiki Cargo3 vulnerabilities
Mediawiki Centralauth Extension3 vulnerabilities
Mediawiki Cirrussearch Extension2 vulnerabilities
Mediawiki CSS Extension2 vulnerabilities
Mediawiki Wikilove Extension2 vulnerabilities
Mediawiki Advancedsearch Extension1 vulnerabilities
Mediawiki AJAX Poll Extension1 vulnerabilities
Mediawiki Apex Skin1 vulnerabilities
Mediawiki Approvedrevs Extension1 vulnerabilities
Mediawiki Campaignevents Extension1 vulnerabilities
Mediawiki Centralnotice Extension1 vulnerabilities
Mediawiki Charts Extension1 vulnerabilities
Mediawiki Collection Extension1 vulnerabilities
Mediawiki Confirm Account Extension1 vulnerabilities
Mediawiki Discussiontools Extension1 vulnerabilities
Mediawiki Easytimeline Extension1 vulnerabilities
Mediawiki Externalguidance1 vulnerabilities
Mediawiki Flaggedrevs Extension1 vulnerabilities
Mediawiki Flexdiagrams Extension1 vulnerabilities
Mediawiki Globalwatchlist Extension1 vulnerabilities
Mediawiki Growth Experiments Extension1 vulnerabilities
Mediawiki Growthexperiments1 vulnerabilities
Mediawiki HTML Tags1 vulnerabilities
Mediawiki Imagerating Extension1 vulnerabilities
Mediawiki Languageselector Extension1 vulnerabilities
Mediawiki Lastmodified Extension1 vulnerabilities
Mediawiki Lockdown Extension1 vulnerabilities
Mediawiki Massmessage Extension1 vulnerabilities
Mediawiki Mobile Frontend Extension1 vulnerabilities
Mediawiki Monaco Skin1 vulnerabilities
Mediawiki Multiboilerplate Extensionmaste1 vulnerabilities
Mediawiki Oauth Extension1 vulnerabilities
Mediawiki Pagetriage1 vulnerabilities
Mediawiki Pagetriage Extension1 vulnerabilities
Mediawiki Redirectmanager Extension1 vulnerabilities
Mediawiki Refreshed Skin1 vulnerabilities
Mediawiki Score Extension1 vulnerabilities
Mediawiki Securepoll Extension1 vulnerabilities
Mediawiki Tabs Extension1 vulnerabilities
Mediawiki Thanks Extension1 vulnerabilities
Mediawiki Thanks Extension, Mediawiki Growth Experiments Extension1 vulnerabilities
Mediawiki Translate Extension1 vulnerabilities
Mediawiki Uploadwizard Extension1 vulnerabilities
Mediawiki Urlshortener Extension1 vulnerabilities
Mediawiki Version Compare Extension1 vulnerabilities
Mediawiki Visual Data Extension1 vulnerabilities

CVE-2025-62702ubuntumediawiki+11y ago21-10-2025 04:42

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - PageTriage Extension allows Stored XSS.This issue affects Mediawiki - PageTriage Extension: from master before 1.44.CVE-2025-62701ubuntumediawiki+11y ago21-10-2025 04:45

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - Wikistories allows Stored XSS.This issue affects Mediawiki - Wikistories: from master before 1.44.CVE-2025-62654the wikimedia foundationmediawiki quizgame extension1y ago17-10-2025 22:38

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation MediaWiki QuizGame extension allows Stored XSS.This issue affects MediaWiki QuizGame extension: 1.39, 1.43, 1.44.CVE-2025-62697ubuntumediawiki+11y ago20-10-2025 19:27

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in The Wikimedia Foundation Mediawiki - LanguageSelector Extension allows Code Injection.This issue affects Mediawiki - LanguageSelector Extension: from master before 1.39.CVE-2025-62655the wikimedia foundationmediawiki cargo extension1y ago17-10-2025 22:46

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in The Wikimedia Foundation MediaWiki Cargo extension allows SQL Injection.This issue affects MediaWiki Cargo extension: 1.39, 1.43, 1.44.CVE-2025-62699ubuntumediawiki+11y ago21-10-2025 03:48

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in The Wikimedia Foundation Mediawiki - Translate Extension allows Footprinting. Translate extension appears to use jobs to make edits to translation pages. This causes the CheckUser tool to log the wrong IP and User-Agent making these edits un-auditable via the CheckUser tool.This issue affects Mediawiki - Translate Extension: from master before 1.39.CVE-2025-62653the wikimedia foundationmediawiki pollny extension1y ago17-10-2025 22:23

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation MediaWiki PollNY extension allows Stored XSS.This issue affects MediaWiki PollNY extension: 1.39, 1.43, 1.44.CVE-2025-62669the wikimedia foundationmediawiki - centralauth extension1y ago18-10-2025 04:34

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in The Wikimedia Foundation Mediawiki - CentralAuth Extension allows Resource Leak Exposure.This issue affects Mediawiki - CentralAuth Extension: from master before 1.39.CVE-2025-62694ubuntumediawiki+11y ago21-10-2025 04:28

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - WikiLove Extension allows Stored XSS.This issue affects Mediawiki - WikiLove Extension: 1.39.CVE-2025-62658ubuntumediawiki+11y ago20-10-2025 20:23

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in The Wikimedia Foundation MediaWiki WatchAnalytics extension allows SQL Injection.This issue affects MediaWiki WatchAnalytics extension: 1.43, 1.44.CVE-2025-62670the wikimedia foundationmediawiki - flexdiagrams extension1y ago18-10-2025 04:29

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - FlexDiagrams Extension allows Stored XSS.This issue affects Mediawiki - FlexDiagrams Extension: master.CVE-2025-62667the wikimedia foundationmediawiki - growthexperiments extension1y ago18-10-2025 04:42

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - GrowthExperiments Extension allows Stored XSS.This issue affects Mediawiki - GrowthExperiments Extension: from master before 1.39.CVE-2025-62693ubuntumediawiki+11y ago20-10-2025 17:51

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - LastModified Extension allows Stored XSS.This issue affects Mediawiki - LastModified Extension: from master before 1.39.CVE-2025-62663the wikimedia foundationmediawiki - uploadwizard extension1y ago18-10-2025 04:16

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - UploadWizard Extension allows Stored XSS.This issue affects Mediawiki - UploadWizard Extension: from master before 1.39.CVE-2025-62657ubuntumediawiki+11y ago20-10-2025 20:19

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation MediaWiki PageForms extension allows Stored XSS.This issue affects MediaWiki PageForms extension: 1.44.CVE-2025-62661the wikimedia foundationmediawiki - thanks extension, mediawiki - growth experiments extension12mo ago21-10-2025 19:33

Incorrect Default Permissions vulnerability in The Wikimedia Foundation Mediawiki - Thanks Extension, Mediawiki - Growth Experiments Extension allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Mediawiki - Thanks Extension, Mediawiki - Growth Experiments Extension: from 1.43 before 1.44.CVE-2025-62662the wikimedia foundationmediawiki - advancedsearch extension1y ago18-10-2025 04:19

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - AdvancedSearch Extension allows Stored XSS.This issue affects Mediawiki - AdvancedSearch Extension: from master before 1.39.CVE-2025-62696ubuntumediawiki+11y ago21-10-2025 03:58

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in The Wikimedia Foundation Mediawiki Foundation - Springboard Extension allows Command Injection.This issue affects Mediawiki Foundation - Springboard Extension: master.CVE-2025-62700ubuntumediawiki+11y ago20-10-2025 17:53

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - MultiBoilerplate Extensionmaste allows Stored XSS.This issue affects Mediawiki - MultiBoilerplate Extensionmaste: from master before 1.39.CVE-2025-62659the wikimedia foundationmediawiki cookieconsent extension12mo ago22-10-2025 15:31

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation MediaWiki CookieConsent extension allows Cross-Site Scripting (XSS).This issue affects MediaWiki CookieConsent extension: from v0.1.0 before v2.0.0.