Login Request a demo
CH
Product
CheckUser
by Wikimedia Foundation · last CVE Jul 1, 2026
9
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 0High 2Medium 4Low 3
Severity
All severities9Critical0High2Medium4Low3
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add CheckUser to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-67478
8.8
0%
Feb 3
Wrong E-Mail address composition for usernames with a comma and Umlauts in it like "Döe, Jähn"
Affected: before 1.39.14, 1.43.4, 1.44.1
CVE-2026-34090
7.5
0%
May 11
Suggested investigations: Handle suppressed usernames
Affected: 1.45.0 before 1.45.2
CVE-2025-61651
6.1
0%
Feb 3
i18n XSS through Special:CheckUser CheckUser helper
Affected: before 1.44.1
CVE-2025-61648
6.1
0%
Feb 3
Stored XSS through system messages in CheckUser
Affected: before 1.44.1
CVE-2026-58034
4.8
0%
Jul 1
Stored XSS through a system message when blocking a temporary account that's related to other temporary accounts
Affected: 1.46.0-rc.0 before 1.46.0
CVE-2025-61658
4.3
0%
Feb 3
Special:GlobalContributions shows edits on wikis the viewer doesn't have access to
Affected: before 1.43.4, 1.44.1
CVE-2025-61649
1.1
0%
Feb 3
UserInfoCard: Check that performing user has permission to view log entries for number of past blocks
Affected: 7cedd58781d261f110651b6af4f41d2d11ae7309
CVE-2025-61650
1.1
0%
Feb 3
UserInfoCard is vulnerable to message key stored XSS
Affected: before 795bf333272206a0189050d975e94b70eb7dc507
CVE-2025-61647
0.4
0%
Feb 3
UserInfoCard: Don't allow access to information about users who are suppressed if you don't have suppressor rights
Affected: a3dc1bbcc33acbcca6831d6afaccbb1054c93a57, 0584eb2ad564648aa3ce9c555dd044dda02b55f4
Showing 9