Filter
AND
-Infinity
0

MediaWikiCSRF

EPSS
0.04%
First published (updated )

Debian LinuxStored XSS leads to privilege escalation in MediaWiki v1.40.0

First published (updated )

MediaWikiAn issue was discovered in the CheckUser extension for MediaWiki through 1.39.3. In certain situatio…

First published (updated )

composer/mediawiki/coreAn issue was discovered in MediaWiki before 1.35.10, 1.36.x through 1.38.x before 1.38.6, and 1.39.x…

First published (updated )

MediaWikiSQL Injection

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

MediaWikiThe admin API module in the QuizGame extension for MediaWiki through 1.37.2 (before 665e33a68f6fa116…

First published (updated )

MediaWikiAn issue was discovered in MediaWiki through 1.37.1. ImportPlanValidator.php in the FileImporter ext…

First published (updated )

MediaWikiAn issue was discovered in MediaWiki through 1.37.1. The CentralAuth extension mishandles a ttl issu…

First published (updated )

MediaWikiAn issue was discovered in Mediawiki through 1.37.1. The check for the override-antispoof permission…

First published (updated )

Red Hat FedoraAn issue was discovered in the Oauth extension for MediaWiki through 1.35.2. MWOAuthConsumerSubmitCo…

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

MediaWikiAn issue was discovered in the AbuseFilter extension in MediaWiki through 1.36. If the MediaWiki:Abu…

First published (updated )

MediaWikiAn issue was discovered in the CentralAuth extension in MediaWiki through 1.36. Autoblocks for Centr…

First published (updated )

MediaWikiIn the GlobalBlocking extension before 2020-03-10 for MediaWiki through 1.34.0, an issue related to …

First published (updated )

MediaWikiMediaWiki before 1.18.5, and 1.19.x before 1.19.2 saves passwords in the local database, (1) which c…

First published (updated )

composer/mediawiki/coreDirect POST to Special:ChangeEmail will bypass reauth check

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

MediaWikiParameters injection in SyntaxHighlight results in multiple vulnerabilities

First published (updated )

MediaWikiapi.php in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 has a Reflected F…

First published (updated )

MediaWikiXEE

First published (updated )

MediaWikiThe MWOAuthDataStore::lookup_token function in Extension:OAuth for MediaWiki 1.25.x before 1.25.3, 1…

First published (updated )

MediaWikiThe User::randomPassword function in MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1…

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203