m
mediawiki
Security Risk Profile
38
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 499 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from December 31, 2004 to present
499
Total CVEs
102
Critical+High
0
Exploited
22
Unpatched
Threat Assessment
Avg CVSS
5.5
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
22
Critical/High
Risk Level
38/100
low
🆕 7Fresh (<7d)📈 10 in Last 30 Days
Severity Distribution
Critical
25High
77Medium
343Low
53Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
28Age Distribution
Common Weaknesses (CWE)
1
XSS
219
2
Infoleak
54
3
CSRF
36
4
Input Validation
21
5
SQL Injection
8
Most Affected Products
1. MediaWiki MediaWiki5276
2. MediaWiki185
3. composer/mediawiki/core108
4. debian/mediawiki85
5. Debian Debian Linux77
Recent Vulnerabilities
See more →CVE-2026-96878
CVSS 6.9EPSS 0%medium
Cargo Exhibit field alias allows stored XSS
Sep 25, 2026🔧 No Patch
CVE-2026-96877
CVSS 6.9EPSS 0%medium
Reflected XSS through Cargo Drilldown full-text search
Sep 25, 2026🔧 No Patch
CVE-2026-96876
CVSS 6.9EPSS 0%medium
Anonymous reflected XSS in CargoExport invalid-alias errors
Sep 25, 2026🔧 No Patch
CVE-2026-96875
CVSS 6.9EPSS 0%medium
Reflected XSS in Cargo Drilldown hierarchy filters
Sep 25, 2026🔧 No Patch
CVE-2026-96874
CVSS 2.3EPSS 0%low
Stored XSS in Cargo Drilldown tab names
Sep 25, 2026🔧 No Patch
CVE-2026-57440
CVSS 7.5high
Mediawiki EmbedVideo Extension has stored XSS via malformed src url with $wgEmbedVideoRequireConsent disabled
Sep 24, 2026
CVE-2026-96873
CVSS 5.5EPSS 0%medium
Reflected XSS in CirrusSearch debug explain output
Sep 24, 2026🔧 No Patch
CVE-2023-37252
CVSS 3.1low
Sep 14, 2026🔧 No Patch
CVE-2023-37253
CVSS 3.1low
Sep 14, 2026🔧 No Patch
CVE-2024-23176
CVSS 5.4medium
Sep 14, 2026🔧 No Patch
Monitor mediawiki in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.