Login Request a demo
CH
Product
CheckUser
by MediaWiki · last CVE Sep 14, 2026
9
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 0High 2Medium 5Low 1
Severity
All severities9Critical0High2Medium5Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add CheckUser to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-67478
8.8
0%
Feb 3
Wrong E-Mail address composition for usernames with a comma and Umlauts in it like "Döe, Jähn"
Affected: 1.39.0 before 1.39.14; 1.43.0 before 1.43.4; 1.44.0
CVE-2026-34090
7.5
0%
May 11
Suggested investigations: Handle suppressed usernames
Affected: 1.45.0 before 1.45.2
CVE-2019-18611
6.5
1%
Oct 29
An issue was discovered in the CheckUser extension through 1.34 for MediaWiki
Affected: through 1.34
CVE-2025-61651
6.1
0%
Feb 3
i18n XSS through Special:CheckUser CheckUser helper
Affected: before 1.44.1
CVE-2025-61648
6.1
0%
Feb 3
Stored XSS through system messages in CheckUser
Affected: before 1.44.1
CVE-2019-16529
5.3
1%
Mar 19
An issue was discovered in the CheckUser extension through 1.35.0 for MediaWiki
Affected: through 1.35
CVE-2025-61658
4.3
0%
Feb 3
Special:GlobalContributions shows edits on wikis the viewer doesn't have access to
Affected: 1.43.0 before 1.43.4; 1.44.0
CVE-2023-37252
3.1
0%
Sep 14
An issue was discovered in the CheckUser extension for MediaWiki through 1.39.3
Affected: before 1.35.11; 1.36.0 before 1.38.7; 1.39.0 before 1.39.4
CVE-2015-2940
–
1%
Apr 13
Cross-site request forgery (CSRF) vulnerability in the CheckUser extension for MediaWiki allows remote attackers to hijack the authentication of certain users for requests that…
Affected: All versions, or not specified
Showing 9