Filter
-Infinity
0

MediaWiki - Extension:SimpleCalendarXSSes in Extension:SimpleCalendar

EPSS
0.10%
First published (updated )

MediaWikiXSSes and potential RCE in Special:VersionCompare

EPSS
0.06%
First published (updated )

Wikimedia Foundation Mediawiki - Growth Experiments ExtensionSaving the right content to MediaWiki:GrowthMentors.json can take down the site

EPSS
0.10%
First published (updated )

MediaWikiCross-origin data leak in mobilefrontend via lazy load images

EPSS
0.05%
First published (updated )

MediaWiki - VisualData ExtensionEvil regex used to process user-provided data in VisualData

EPSS
0.10%
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

MediaWikiHTML injection in feed output from i18n message

EPSS
0.06%
First published (updated )

MediaWikiSystem message XSS in HTMLTags

EPSS
0.10%
First published (updated )

Wikimedia Foundation Mediawiki - Confirm Account ExtensionXSSes in Extension:ConfirmAccount

EPSS
0.06%
First published (updated )

MediaWikiIP and user agent leaks in Extension:Tabs

EPSS
0.10%
First published (updated )

MediaWiki GrowthExperimentsi18n XSS vulnerability in message growthexperiments

EPSS
0.10%
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Wikimedia Foundation Mediawiki - OAuth ExtensionRevoking authorization of OAuth2 consumer does not invalidate refresh tokens

EPSS
0.08%
First published (updated )

Wikimedia Foundation MediaWiki - Wikibase Media Info ExtensionWikitext stored XSS on filepages due to dangerous WBMI serialization

EPSS
0.10%
First published (updated )

Wikimedia Foundation Mediawiki - AJAX Poll ExtensionXSSes in AJAXPoll

EPSS
0.10%
First published (updated )

Wikimedia Foundation Mediawiki - Wikidata ExtensionWikibase CommonsInlineImageFormatter: i18n XSS

EPSS
0.10%
First published (updated )

Wikimedia Foundation AbuseFilterAbuseFilter log interfaces expose global private and hidden filters when central DB is not available

2.3
EPSS
0.08%
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

MediaWikiPotential javascript injection attack enabled by Unicode normalization in Action API

2.1
EPSS
0.09%
First published (updated )

MediaWikiLogPager.php: Restriction enforcer functions do not correctly enforce suppression restrictions

2.1
EPSS
0.08%
First published (updated )

MediaWikiCascading protection is not preventing file reversions

EPSS
0.05%
First published (updated )

MediaWiki"reupload-own" restriction can be bypassed by reverting file

EPSS
0.05%
First published (updated )

MediaWikii18n XSS vulnerability in HTMLMultiSelectField when sections are used

EPSS
0.09%
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

MediaWiki SocialProfile ExtensionSpecial:EditProfile exposes the contents of profile fields marked "hidden"/friends or "friends of friends" when the privileged user isn't a friend of the user whose profile they edit(ed)

2.4
EPSS
0.04%
First published (updated )

MediaWikiAPI list=globalblocks can reveal IP of autoblock if username and IP are included in the bgtargets parameter

3.5
EPSS
0.04%
First published (updated )

MediaWiki - RefreshSpecial ExtensionXSS in Special:RefreshSpecial

EPSS
0.04%
First published (updated )

MediaWiki - OpenBadges ExtensionXSSes in Special:BadgeView

EPSS
0.04%
First published (updated )

MediaWikiXSSes in Extension:ArticleFeedbackv5

EPSS
0.04%
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

MediaWiki - Breadcrumbs2 extensionXSS in BreadCrumbs2

EPSS
0.04%
First published (updated )

MediaWiki 1.39End of life

First published (updated )

MediaWiki 1.39End of life

First published (updated )

MediaWiki 1.41Reached end of life

First published (updated )

MediaWiki 1.41Reached end of life

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203