Login Request a demo
TW
Vendor
The Wikimedia Foundation
71 products with CVEs on record
98
CVEs
0
On KEV
12
New 30D
Products
MW
Mediawiki - WikiLambda Extension
The Wikimedia Foundation
7.4
5 CVEs0 on KEV1 new
MC
Mediawiki - CentralAuth extension
The Wikimedia Foundation
8.8
4 CVEs0 on KEV1 new
MP
Mediawiki - PageTriage Extension
The Wikimedia Foundation
6.9
2 CVEs0 on KEV1 new
MW
Mediawiki - Wikibase Extension
The Wikimedia Foundation
7.2
2 CVEs0 on KEV1 new
MC
MediaWiki Collection (Book) extension
The Wikimedia Foundation
1.1
1 CVEs0 on KEV1 new
MC
MediaWiki CommonsMetadata extension
The Wikimedia Foundation
1.1
1 CVEs0 on KEV1 new
MM
MediaWiki MediaSearch extension
The Wikimedia Foundation
1.2
1 CVEs0 on KEV1 new
MP
MediaWiki Page_Forms extension
The Wikimedia Foundation
1.2
1 CVEs0 on KEV1 new
MR
MediaWiki ReadingLists extension
The Wikimedia Foundation
1.1
1 CVEs0 on KEV1 new
MW
MediaWiki Wikbase extension
The Wikimedia Foundation
0.3
1 CVEs0 on KEV1 new
MW
MediaWiki WikiForum extension
The Wikimedia Foundation
1.1
1 CVEs0 on KEV1 new
MW
MediaWiki Wikistories extension
The Wikimedia Foundation
0.3
1 CVEs0 on KEV1 new
MC
Mediawiki - Cargo extension
The Wikimedia Foundation
9.8
11 CVEs0 on KEV0 new
MG
Mediawiki - GrowthExperiments Extension
The Wikimedia Foundation
6.9
4 CVEs0 on KEV0 new
MC
Mediawiki - Cargo
The Wikimedia Foundation
9.8
3 CVEs0 on KEV0 new
MC
Mediawiki - CirrusSearch Extension
The Wikimedia Foundation
6.9
2 CVEs0 on KEV0 new
MC
Mediawiki - CSS Extension
The Wikimedia Foundation
8.2
2 CVEs0 on KEV0 new
MW
Mediawiki - Wikilove Extension
The Wikimedia Foundation
6.9
2 CVEs0 on KEV0 new
MA
Mediawiki - AdvancedSearch Extension
The Wikimedia Foundation
6.9
1 CVEs0 on KEV0 new
MA
Mediawiki - AJAX Poll Extension
The Wikimedia Foundation
5.4
1 CVEs0 on KEV0 new
MA
Mediawiki - Apex skin
The Wikimedia Foundation
4.8
1 CVEs0 on KEV0 new
MA
Mediawiki - ApprovedRevs Extension
The Wikimedia Foundation
4.3
1 CVEs0 on KEV0 new
MC
Mediawiki - CampaignEvents Extension
The Wikimedia Foundation
6.9
1 CVEs0 on KEV0 new
MC
Mediawiki - CentralNotice extension
The Wikimedia Foundation
6.1
1 CVEs0 on KEV0 new
MC
Mediawiki - Charts Extension
The Wikimedia Foundation
6.1
1 CVEs0 on KEV0 new
MC
Mediawiki - Collection extension
The Wikimedia Foundation
6.1
1 CVEs0 on KEV0 new
MC
Mediawiki - Confirm Account Extension
The Wikimedia Foundation
5.4
1 CVEs0 on KEV0 new
MC
MediaWiki CookieConsent extension
The Wikimedia Foundation
2.1
1 CVEs0 on KEV0 new
MC
Mediawiki Core - Feed Utils
The Wikimedia Foundation
6.9
1 CVEs0 on KEV0 new
MD
Mediawiki - DiscussionTools Extension
The Wikimedia Foundation
8.8
1 CVEs0 on KEV0 new
ME
Mediawiki - EasyTimeline extension
The Wikimedia Foundation
9.8
1 CVEs0 on KEV0 new
ME
Mediawiki - Extension:SimpleCalendar
The Wikimedia Foundation
6.9
1 CVEs0 on KEV0 new
ME
Mediawiki - ExternalGuidance
The Wikimedia Foundation
6.9
1 CVEs0 on KEV0 new
MF
Mediawiki - FlaggedRevs extension
The Wikimedia Foundation
6.9
1 CVEs0 on KEV0 new
MF
Mediawiki - FlexDiagrams Extension
The Wikimedia Foundation
6.9
1 CVEs0 on KEV0 new
MF
Mediawiki Foundation - Springboard Extension
The Wikimedia Foundation
6.9
1 CVEs0 on KEV0 new
MG
MediaWiki GlobalBlocking extension
The Wikimedia Foundation
5.8
1 CVEs0 on KEV0 new
MG
Mediawiki - GlobalWatchlist Extension
The Wikimedia Foundation
6.9
1 CVEs0 on KEV0 new
MG
Mediawiki - Growth Experiments Extension
The Wikimedia Foundation
5.4
1 CVEs0 on KEV0 new
MG
Mediawiki - GrowthExperiments
The Wikimedia Foundation
6.5
1 CVEs0 on KEV0 new
MH
Mediawiki - HTML Tags
The Wikimedia Foundation
5.4
1 CVEs0 on KEV0 new
MI
Mediawiki - ImageRating Extension
The Wikimedia Foundation
6.9
1 CVEs0 on KEV0 new
ML
Mediawiki - LanguageSelector Extension
The Wikimedia Foundation
8.8
1 CVEs0 on KEV0 new
ML
Mediawiki - LastModified Extension
The Wikimedia Foundation
6.9
1 CVEs0 on KEV0 new
ML
Mediawiki - Lockdown Extension
The Wikimedia Foundation
10.0
1 CVEs0 on KEV0 new
MM
Mediawiki - MassMessage extension
The Wikimedia Foundation
6.1
1 CVEs0 on KEV0 new
MM
Mediawiki - Mobile Frontend Extension
The Wikimedia Foundation
6.9
1 CVEs0 on KEV0 new
MM
Mediawiki - Monaco Skin
The Wikimedia Foundation
2.3
1 CVEs0 on KEV0 new
MM
Mediawiki - MultiBoilerplate Extensionmaste
The Wikimedia Foundation
6.9
1 CVEs0 on KEV0 new
MO
Mediawiki - OAuth Extension
The Wikimedia Foundation
5.4
1 CVEs0 on KEV0 new
MP
MediaWiki PageForms extension
The Wikimedia Foundation
5.8
1 CVEs0 on KEV0 new
MP
Mediawiki - PageTriage
The Wikimedia Foundation
6.9
1 CVEs0 on KEV0 new
MP
MediaWiki PollNY extension
The Wikimedia Foundation
2.0
1 CVEs0 on KEV0 new
MQ
MediaWiki QuizGame extension
The Wikimedia Foundation
2.0
1 CVEs0 on KEV0 new
MR
Mediawiki - RedirectManager Extension
The Wikimedia Foundation
6.3
1 CVEs0 on KEV0 new
MR
Mediawiki - Refreshed skin
The Wikimedia Foundation
6.1
1 CVEs0 on KEV0 new
MS
Mediawiki - Score Extension
The Wikimedia Foundation
6.9
1 CVEs0 on KEV0 new
MS
Mediawiki - SecurePoll Extension
The Wikimedia Foundation
6.9
1 CVEs0 on KEV0 new
MT
Mediawiki - Tabs Extension
The Wikimedia Foundation
6.9
1 CVEs0 on KEV0 new
MT
Mediawiki - Thanks Extension
The Wikimedia Foundation
6.1
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-103585
MM
MediaWiki MediaSearch extension
The Wikimedia Foundation
1.2
0%
Sep 30attacker-controlled javascript license URL via XSS
CVE-2026-103584
MC
MediaWiki CommonsMetadata extension
The Wikimedia Foundation
1.1
0%
Sep 30attacker-controlled javascript license URL via XSS
CVE-2026-103440
MP
MediaWiki PageTriage extension
The Wikimedia Foundation
1.2
0%
Sep 30pagetriagelist discloses suppressed reviewer usernames
CVE-2026-103439
MW
MediaWiki Wikbase extension
The Wikimedia Foundation
0.3
0%
Sep 30Various rawParams() and escaped() updates to prevent XSS in Wikibase extension
CVE-2026-103438
MW
MediaWiki Wikistories extension
The Wikimedia Foundation
0.3
0%
Sep 30Various rawParams() and escaped() updates to prevent XSS in Wikistories extension
CVE-2026-103437
MR
MediaWiki ReadingLists extension
The Wikimedia Foundation
1.1
0%
Sep 30ReadingLists imported metadata permits JavaScript URL XSS
CVE-2026-103446
MW
MediaWiki WikiLambda extension
The Wikimedia Foundation
7.4
0%
Sep 30WikiLambda exposes anonymous execution of unsaved Abstract Wikipedia fragments
CVE-2026-103445
MP
MediaWiki Page_Forms extension
The Wikimedia Foundation
1.2
0%
Sep 30Stored XSS through PageForms #autoedit redirect links
CVE-2026-103444
MW
MediaWiki WikiForum extension
The Wikimedia Foundation
1.1
0%
Sep 30Stored XSS through system messages in WikiForum
CVE-2026-103443
MC
MediaWiki Collection (Book) extension
The Wikimedia Foundation
1.1
0%
Sep 30API permits session-seeded javascript URL XSS
CVE-2026-103442
MC
MediaWiki CentralAuth extension
The Wikimedia Foundation
7.2
0%
Sep 30MergeAccount PHP object injection via session-key substitution
CVE-2026-103441
MW
MediaWiki Wikibase extension
The Wikimedia Foundation
7.2
0%
Sep 30Unauthenticated arbitrary file deletion through Wikibase serialized entity parsing
CVE-2026-103051
MC
Mediawiki - CentralNotice extension
The Wikimedia Foundation
6.1
0%
Sep 29Stored i18n XSSs in CentralNotice
CVE-2026-103050
MM
Mediawiki - MassMessage extension
The Wikimedia Foundation
6.1
0%
Sep 29Stored i18n XSS in MassMessage
CVE-2026-103049
MC
Mediawiki - Cargo extension
The Wikimedia Foundation
6.1
0%
Sep 29XSS in Cargo's Special:CargoQuery page due to unsanitized table headers
CVE-2026-103048
MC
Mediawiki - Collection extension
The Wikimedia Foundation
6.1
0%
Sep 29Open Redirect in Special:Book
CVE-2026-103047
MC
Mediawiki - CentralAuth extension
The Wikimedia Foundation
6.1
0%
Sep 29XSS through i18n message in CentralAuth
CVE-2026-103045
MR
Mediawiki - Refreshed skin
The Wikimedia Foundation
6.1
0%
Sep 29XSS in Refreshed skin
CVE-2026-103044
ME
Mediawiki - EasyTimeline extension
The Wikimedia Foundation
9.8
0%
Sep 29EasyTimeline should not serve image maps as application/xml
CVE-2026-103046
MW
Mediawiki - WikiLambda Extension
The Wikimedia Foundation
6.1
0%
Sep 29WikifunctionsFragmentRenderer does unsafe string replacements on user-provided HTML
CVE-2026-96879
MF
Mediawiki - FlaggedRevs extension
The Wikimedia Foundation
6.9
0%
Sep 25"Checked by" label in page history should not be shown if the underlying review log entry is suppressed"
CVE-2026-96878
MC
Mediawiki - Cargo extension
The Wikimedia Foundation
6.9
0%
Sep 25Cargo Exhibit field alias allows stored XSS
CVE-2026-96877
MC
Mediawiki - Cargo extension
The Wikimedia Foundation
6.9
0%
Sep 25Reflected XSS through Cargo Drilldown full-text search
CVE-2026-96876
MC
Mediawiki - Cargo extension
The Wikimedia Foundation
6.9
0%
Sep 25Anonymous reflected XSS in CargoExport invalid-alias errors
CVE-2026-96875
MC
Mediawiki - Cargo extension
The Wikimedia Foundation
6.9
0%
Sep 25Reflected XSS in Cargo Drilldown hierarchy filters
CVE-2026-100237
MT
Mediawiki - Thanks Extension
The Wikimedia Foundation
6.1
0%
Sep 25Stored i18n XSS in the Flow integration of Thanks
CVE-2026-96874
MC
Mediawiki - Cargo extension
The Wikimedia Foundation
2.3
0%
Sep 25Stored XSS in Cargo Drilldown tab names
CVE-2026-96873
MC
Mediawiki - CirrusSearch Extension
The Wikimedia Foundation
5.5
0%
Sep 24Reflected XSS in CirrusSearch debug explain output
CVE-2026-96872
MW
Mediawiki - WikiLambda Extension
The Wikimedia Foundation
2.9
0%
Sep 23WikiLambda public function execution bypasses the unsaved-code permission through nested Z825 compositions
CVE-2026-14363
MC
Mediawiki - Cargo Extension
The Wikimedia Foundation
9.8
1%
Jul 1Cargo Extension: SQLi in Special:Drilldown
CVE-2026-14358
MC
Mediawiki - Charts Extension
The Wikimedia Foundation
6.1
0%
Jul 1Stored XSS in Wikimedia Chart pie tooltip via Data:*.tab field title
CVE-2026-58517
MW
Mediawiki - WikiLambda Extension
The Wikimedia Foundation
4.3
0%
Jul 1Blocked users can create and edit WikiLambda objects
CVE-2026-58521
MC
Mediawiki - Cargo Extension
The Wikimedia Foundation
9.8
1%
Jul 1SQLi in Cargo extension via year range filter
CVE-2026-58520
MU
Mediawiki - UrlShortener Extension
The Wikimedia Foundation
6.1
0%
Jul 1UrlShortener defaults to ineffective validation open to third-party redirects
CVE-2026-58519
MC
Mediawiki - Cargo Extension
The Wikimedia Foundation
5.4
0%
Jul 1Stored XSS through Cargo's map format
CVE-2026-58518
MR
Mediawiki - RedirectManager Extension
The Wikimedia Foundation
6.3
0%
Jul 1Cross-Site request forgery (CSRF) vulnerability in The Wikimedia Foundation Mediawiki - RedirectManager Extension allows Cross Site Request Forgery
CVE-2026-39936
MS
Mediawiki - Score Extension
The Wikimedia Foundation
6.9
0%
Apr 7Stored XSS in Score due to usage of non-reserved data attributes
CVE-2026-39935
MC
Mediawiki - CampaignEvents Extension
The Wikimedia Foundation
6.9
0%
Apr 7XSS-via-i18n in localised wiki names
CVE-2026-39934
MG
Mediawiki - GrowthExperiments Extension
The Wikimedia Foundation
6.9
0%
Apr 7Growth Experiments ReassignMenteesJob runs as an infinite loop
CVE-2026-39933
MG
Mediawiki - GlobalWatchlist Extension
The Wikimedia Foundation
6.9
0%
Apr 7Multiple XSS vulnerabilities in GlobalWatchlist
CVE-2026-39937
MC
Mediawiki - CentralAuth Extension
The Wikimedia Foundation
8.8
0%
Apr 7Global vanishing does not completely remove user email
CVE-2026-22711
MW
Mediawiki - Wikilove Extension
The Wikimedia Foundation
6.9
0%
Apr 7Stored XSS through system messages in WikiLove
CVE-2025-11175
MD
Mediawiki - DiscussionTools Extension
The Wikimedia Foundation
8.8
0%
Jan 30DiscussionTools should use better regex
CVE-2026-22712
MA
Mediawiki - ApprovedRevs Extension
The Wikimedia Foundation
4.3
0%
Jan 9ApprovedRevs allows bypassing the inline CSS sanitizer
CVE-2026-22713
MG
Mediawiki - GrowthExperiments Extension
The Wikimedia Foundation
5.4
0%
Jan 9Stored XSS through edit summaries in GrowthExperiments
CVE-2026-22714
MM
Mediawiki - Monaco Skin
The Wikimedia Foundation
2.3
0%
Jan 8i18n XSS, DoS and config SQLI in Monaco
CVE-2026-22710
MW
Mediawiki - Wikibase Extension
The Wikimedia Foundation
5.4
0%
Jan 8Stored XSS through autocomment system messages in Wikibase
CVE-2025-62659
MC
MediaWiki CookieConsent extension
The Wikimedia Foundation
2.1
0%
Oct 22The CookieConsent extension does not properly use reserved data attributes, thus introducing potential XSS vectors
CVE-2025-62661
MT
Mediawiki - Thanks Extension, Mediawiki - Growth Experiments Extension
The Wikimedia Foundation
6.9
0%
Oct 21Do permission checking when getting counts of global and local edits, new articles and thanks
CVE-2025-12004
ML
Mediawiki - Lockdown Extension
The Wikimedia Foundation
10.0
0%
Oct 21The compare API module breaks Extension:Lockdown
CVE-2025-62701
MW
Mediawiki - Wikistories
The Wikimedia Foundation
6.9
0%
Oct 21Stored XSS through system messages
CVE-2025-62702
MP
Mediawiki - PageTriage Extension
The Wikimedia Foundation
6.9
0%
Oct 21Stored XSS through system messages
CVE-2025-62694
MW
Mediawiki - WikiLove Extension
The Wikimedia Foundation
6.9
0%
Oct 21Stored XSS through a system message
CVE-2025-62695
MW
Mediawiki - WikiLambda Extension
The Wikimedia Foundation
6.9
0%
Oct 21Stored XSS through system messages
CVE-2025-62696
MF
Mediawiki Foundation - Springboard Extension
The Wikimedia Foundation
6.9
1%
Oct 21Multiple critical security issues in Springboard
CVE-2025-62699
MT
Mediawiki - Translate Extension
The Wikimedia Foundation
6.9
0%
Oct 21Special:Translate tool does not use the correct IP and User-Agent in the CheckUser tool
CVE-2025-62658
MW
MediaWiki WatchAnalytics extension
The Wikimedia Foundation
7.5
0%
Oct 20SQL injection in WatchAnalytics through Special:ClearPendingReviews
CVE-2025-62657
MP
MediaWiki PageForms extension
The Wikimedia Foundation
5.8
0%
Oct 20Stored XSS through system messages in PageForms
CVE-2025-62656
MG
MediaWiki GlobalBlocking extension
The Wikimedia Foundation
5.8
0%
Oct 20GlobalBlocking Special:GlobalBlockList vulnerable to message key stored XSS
CVE-2025-62697
ML
Mediawiki - LanguageSelector Extension
The Wikimedia Foundation
8.8
0%
Oct 20Improperly sanitized style parameter in LanguageSelector