miraheze
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 17 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from April 28, 2021 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →ManageWiki Vulnerable to Self-XSS in review dialog via unsanitized field reflection
ManageWiki vulnerable to permission bypass when disabling extensions requiring certain permissions in Special:ManageWiki/extensions
ManageWiki has SQL injection vulnerability in NamespaceMigrationJob
Users can impersonate import requesters if their actor IDs coincide in ImportDump
Cross-site Scripting (XSS) in Special:RequestWikiQueue when displaying sitename in CreateWiki
Cross-site Scripting (XSS) in Special:WikiDiscover when displaying wiki information in WikiDiscover
CreateWiki vulnerable to impersonation of wiki requester
Oversight in fix for GHSA-4rcf-3cj2-46mq may have exposed suppressed wiki requests on private wikis
CreateWiki Leak of suppressed wiki requests outside of `CreateWikiGlobalWiki`
CreateWiki's wiki request suppression ignores the suppression settings set by the suppressor
Monitor miraheze in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.