Login Request a demo
ME
Product
Mediawiki
by Mediawiki · last CVE Jul 1, 2026
417
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities417In the news0Timeline
Severity mix
Critical 20High 63Medium 198Low 3
Severity
All severities417Critical20High63Medium198Low3
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Mediawiki to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-58025
9.8
1%
Jul 1
Remote Code Execution via Unsafe Deserialization in LogItem Import
Affected: 1.43.0 before 1.43.9; 1.44.0 before 1.44.6; 1.45.0 before 1.45.4; 1.46.0
CVE-2025-67484
9.8
0%
Feb 3
Action API xslt option allows JavaScript execution by administrators who are not interface administrators
Affected: 1.39.0 before 1.39.16; 1.43.0 before 1.43.6; 1.44.0 before 1.44.3; 1.45.0
CVE-2024-34502
9.8
0%
May 5
An issue was discovered in WikibaseLexeme in MediaWiki before 1.39.6, 1.40.x before 1.40.2, and 1.41.x before 1.41.1
Affected: before 1.39.6; 1.40.0 before 1.40.2; 1.41.0 before 1.41.1
CVE-2023-37303
9.8
1%
Jun 30
An issue was discovered in the CheckUser extension for MediaWiki through 1.39.3
Affected: through 1.39.3
CVE-2023-29141
9.8
1%
Mar 31
An issue was discovered in MediaWiki before 1.35.10, 1.36.x through 1.38.x before 1.38.6, and 1.39.x before 1.39.3
Affected: before 1.35.10; 1.36.0 before 1.38.6; 1.39.0 before 1.39.3
CVE-2022-29906
9.8
1%
Apr 29
The admin API module in the QuizGame extension for MediaWiki through 1.37.2 (before 665e33a68f6fa1167df99c0aa18ed0157cdf9f66) omits a check for the quizadmin user
Affected: through 1.37.2
CVE-2022-29904
9.8
17%
Apr 29
The SemanticDrilldown extension for MediaWiki through 1.37.2 (before e688bdba6434591b5dff689a45e4d53459954773) allows SQL injection with certain '-' and '_' constraints
Affected: through 1.37.2
CVE-2022-28209
9.8
1%
Mar 30
An issue was discovered in Mediawiki through 1.37.1
Affected: through 1.37.1
CVE-2022-28206
9.8
1%
Mar 30
An issue was discovered in MediaWiki through 1.37.1
Affected: through 1.37.1
CVE-2022-28205
9.8
2%
Mar 30
An issue was discovered in MediaWiki through 1.37.1
Affected: through 1.37.1
CVE-2021-31556
9.8
2%
Aug 12
An issue was discovered in the Oauth extension for MediaWiki through 1.35.2
Affected: through 1.35.2
CVE-2021-36128
9.8
1%
Jul 2
An issue was discovered in the CentralAuth extension in MediaWiki through 1.36
Affected: through 1.36
CVE-2021-36126
9.8
1%
Jul 2
An issue was discovered in the AbuseFilter extension in MediaWiki through 1.36
Affected: through 1.36
CVE-2020-10534
9.8
1%
Mar 12
In the GlobalBlocking extension before 2020-03-10 for MediaWiki through 1.34.0, an issue related to IP range evaluation resulted in blocked users re-gaining escalated privileges
Affected: through 1.34.0
CVE-2019-12468
9.8
3%
Jul 10
An Incorrect Access Control vulnerability was found in Wikimedia MediaWiki 1.27.0 through 1.32.1
Affected: 1.27.0 through 1.32.1
CVE-2017-0372
9.8
11%
Apr 13
Parameters injection in the SyntaxHighlight extension of Mediawiki before 1.23.16, 1.27.3 and 1.28.2 might result in multiple vulnerabilities
Affected: through 1.23.15; 1.27.0; 1.27.1; 1.27.2; 1.28.0; 1.28.1
CVE-2017-8809
9.8
8%
Nov 15
api.php in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 has a Reflected File Download vulnerability
Affected: through 1.27.3; 1.28.0; 1.28.1; 1.28.2; 1.29.0; 1.29.1
CVE-2014-9487
9.8
2%
Oct 17
The getid3 library in MediaWiki before 1.24.1, 1.23.8, 1.22.15 and 1.19.23 allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other…
Affected: 1.19; 1.19; 1.19; 1.19.0; 1.19.1; 1.19.2; +34 more
CVE-2015-8009
9.8
3%
Jul 25
The MWOAuthDataStore::lookup_token function in Extension:OAuth for MediaWiki 1.25.x before 1.25.3, 1.24.x before 1.24.4, and before 1.23.11 does not properly validate the…
Affected: through 1.23.10; 1.24.0; 1.24.1; 1.24.2; 1.24.3; 1.25.0; +2 more
CVE-2015-8626
9.8
2%
Mar 23
The User::randomPassword function in MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1 generates passwords smaller than…
Affected: through 1.23.11; 1.24.0; 1.24.1; 1.24.2; 1.24.3; 1.24.4; +5 more
Showing 20