Veille CVE

Recherche « Wikimedia Foundation MediaWiki »

77 CVE

Critique 6 Élevée 16 Moyenne 43 Faible 12 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Wikimedia Foundation MediaWiki » ✕
  1. CVE-2026-103585 1.2 Faible

    The Wikimedia Foundation MediaWiki MediaSearch extension

    Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia Foundation MediaWiki MediaSearch extension allows Cross-Site Scripting (XSS). This issue affects MediaWiki MediaSearch extension: 1.46, 1.45, and 1.43.

  2. CVE-2026-103584 1.1 Faible

    The Wikimedia Foundation MediaWiki CommonsMetadata extension

    Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia Foundation MediaWiki CommonsMetadata extension allows Cross-Site Scripting (XSS). This issue affects MediaWiki CommonsMetadata extension: 1.46, 1.45, and 1.43.

  3. CVE-2026-103446 7.4 Élevée

    The Wikimedia Foundation MediaWiki WikiLambda extension

    Authorization bypass through User-Controlled key vulnerability in The Wikimedia Foundation MediaWiki WikiLambda extension allows Authentication Bypass. This issue affects MediaWiki WikiLambda extension: 1.46.

  4. CVE-2026-103445 1.2 Faible

    The Wikimedia Foundation MediaWiki Page_Forms extension

    Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia Foundation MediaWiki Page_Forms extension allows Stored XSS. This issue affects MediaWiki Page_Forms extension: 1.46, 1.45, and 1.43.

  5. CVE-2026-103440 1.2 Faible

    The Wikimedia Foundation MediaWiki PageTriage extension

    Exposure of sensitive information through data queries vulnerability in The Wikimedia Foundation MediaWiki PageTriage extension allows Information Elicitation. This issue affects MediaWiki PageTriage extension: 1.46, 1.45, and 1.43.

  6. CVE-2026-103439 0.3 Faible

    The Wikimedia Foundation MediaWiki Wikbase extension

    Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia Foundation MediaWiki Wikbase extension allows Cross-Site Scripting (XSS). This issue affects MediaWiki Wikbase extension: 1.46, 1.45, and 1.43.

  7. CVE-2026-103438 0.3 Faible

    The Wikimedia Foundation MediaWiki Wikistories extension

    Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia Foundation MediaWiki Wikistories extension allows Cross-Site Scripting (XSS). This issue affects MediaWiki Wikistories extension: 1.46, 1.45, and 1.43.

  8. CVE-2026-103437 1.1 Faible

    The Wikimedia Foundation MediaWiki ReadingLists extension

    Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia Foundation MediaWiki ReadingLists extension allows Reflected XSS. This issue affects MediaWiki ReadingLists extension: 1.46 and 1.45.

  9. CVE-2026-103444 1.1 Faible

    The Wikimedia Foundation MediaWiki WikiForum extension

    Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia Foundation MediaWiki WikiForum extension allows Stored XSS. This issue affects MediaWiki WikiForum extension: master.

  10. CVE-2026-103443 1.1 Faible

    The Wikimedia Foundation MediaWiki Collection (Book) extension

    Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia Foundation MediaWiki Collection (Book) extension allows XSS Targeting Non-Script Elements. This issue affects MediaWiki Collection (Book) extension: 1.46, 1.45, and 1.43.

  11. CVE-2026-103442 7.2 Élevée

    The Wikimedia Foundation MediaWiki CentralAuth extension

    External control of system or configuration setting vulnerability in The Wikimedia Foundation MediaWiki CentralAuth extension allows Code Injection. This issue affects MediaWiki CentralAuth extension: 1.46, 1.45, and 1.43.

  12. CVE-2026-103441 7.2 Élevée

    The Wikimedia Foundation MediaWiki Wikibase extension

    Deserialization of untrusted data vulnerability in The Wikimedia Foundation MediaWiki Wikibase extension allows Leverage Executable Code in Non-Executable Files. This issue affects MediaWiki Wikibase extension: 1.46, 1.45, and 1.43.

  13. CVE-2026-103051 6.1 Moyenne

    The Wikimedia Foundation Mediawiki - CentralNotice extension

    Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - CentralNotice extension allows Stored XSS. This issue affects Mediawiki - CentralNotice extension: before 1.46.1, 1.45.5, 1.43.10.

  14. CVE-2026-103050 6.1 Moyenne

    The Wikimedia Foundation Mediawiki - MassMessage extension

    Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - MassMessage extension allows Stored XSS. This issue affects Mediawiki - MassMessage extension: before 1.46.1, 1.45.5, 1.43.10.

  15. CVE-2026-103049 6.1 Moyenne

    The Wikimedia Foundation Mediawiki - Cargo extension

    Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - Cargo extension allows Reflected XSS. This issue affects Mediawiki - Cargo extension: before 1.46.1.

  16. CVE-2026-103048 6.1 Moyenne

    The Wikimedia Foundation Mediawiki - Collection extension

    URL redirection to untrusted site ('open redirect') vulnerability in The Wikimedia Foundation Mediawiki - Collection extension allows Fake the Source of Data. This issue affects Mediawiki - Collection extension: before 1.46.1, 1.45.5, 1.43.10.

  17. CVE-2026-103047 6.1 Moyenne

    The Wikimedia Foundation Mediawiki - CentralAuth extension

    Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - CentralAuth extension allows Stored XSS. This issue affects Mediawiki - CentralAuth extension: before 1.46.1, 1.45.5, 1.43.10.

  18. CVE-2026-103046 6.1 Moyenne

    The Wikimedia Foundation Mediawiki - WikiLambda Extension

    Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Wikimedia Foundation MediaWiki - WikiLambda extension allows Stored XSS. This issue affects MediaWiki - WikiLambda extension: before 1.46.1.

  19. CVE-2026-103045 6.1 Moyenne

    The Wikimedia Foundation Mediawiki - Refreshed skin

    Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - Refreshed skin allows Stored XSS. This issue affects Mediawiki - Refreshed skin: before 1.46.1, 1.45.5, 1.43.10.

  20. CVE-2026-103044 9.8 Critique

    The Wikimedia Foundation Mediawiki - EasyTimeline extension

    XML injection (aka blind XPath injection) vulnerability in The Wikimedia Foundation Mediawiki - EasyTimeline extension allows XML Injection. This issue affects Mediawiki - EasyTimeline extension: before 1.46.1, 1.45.5, 1.43.10.

  21. CVE-2026-102796 7.5 Élevée

    Wikimedia Foundation Mediawiki - UserPageViewTracker Extension

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Wikimedia Foundation Mediawiki - UserPageViewTracker Extension allows SQL Injection. This issue affects Mediawiki - UserPageViewTracker Extension: from * before 1.46.1, 1.45.5, 1.43.10.

  22. CVE-2026-100245 6.1 Moyenne

    Wikimedia Foundation Mediawiki - Wikibase Extension

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - Wikibase Extension allows Stored XSS. This issue affects Mediawiki - Wikibase Extension: from * before 1.46.1, 1.45.5, 1.43.10.

  23. CVE-2026-100244 7.5 Élevée

    Wikimedia Foundation Mediawiki - CentralAuth Extension

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - CentralAuth Extension allows Excavation. This issue affects Mediawiki - CentralAuth Extension: from * before 1.46.1, 1.45.5, 1.43.10.

  24. CVE-2026-100243 6.1 Moyenne

    Wikimedia Foundation Mediawiki - WikiSEO Extension

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - WikiSEO Extension allows Stored XSS. This issue affects Mediawiki - WikiSEO Extension: from * before 1.46.1, 1.45.5, 1.43.10.

  25. CVE-2026-100242 7.5 Élevée

    Wikimedia Foundation Mediawiki - DataTransfer Extension

    Dependency on Vulnerable Third-Party Component and Uncontrolled Resource Consumption vulnerability in Wikimedia Foundation Mediawiki - DataTransfer Extension allows Excessive Allocation. This issue affects Mediawiki - DataTransfer Extension: from 1.46.0 before 1.47.0.

  26. CVE-2026-100241 7.5 Élevée

    Wikimedia Foundation Mediawiki - EventBus Extension

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - EventBus Extension allows Excavation. This issue affects Mediawiki - EventBus Extension: 1.47.0-alpha.

  27. CVE-2026-100240 9.1 Critique

    Wikimedia Foundation Mediawiki - TemplateSandbox Extension

    Missing Authorization vulnerability in Wikimedia Foundation Mediawiki - TemplateSandbox Extension allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Mediawiki - TemplateSandbox Extension: from * before 1.46.1, 1.45.5, 1.43.10.

  28. CVE-2026-100238 6.1 Moyenne

    Wikimedia Foundation Mediawiki - Flow Extension

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - Flow Extension allows Stored XSS. This issue affects Mediawiki - Flow Extension: from * before 1.46.1, 1.45.5, 1.43.10.

  29. CVE-2026-100383 4.8 Moyenne

    Wikimedia Foundation Mediawiki - WikiLambda Extension

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - WikiLambda Extension allows Cross-Site Scripting (XSS). This issue affects Mediawiki - WikiLambda Extension: 1.47.0-alpha. The issue has been remediated on the `master` branch.

  30. CVE-2026-100382 10.0 Critique

    Wikimedia Foundation Mediawiki - ExternalData Extension

    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Wikimedia Foundation Mediawiki - ExternalData Extension allows OS Command Injection. This issue affects Mediawiki - ExternalData Extension: from * before 3.7.

  31. CVE-2026-100381 5.3 Moyenne

    Wikimedia Foundation Mediawiki - UploadWizard Extension

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - UploadWizard Extension allows Cross-Site Scripting (XSS). This issue affects Mediawiki - UploadWizard Extension: from * before 1.46.1, 1.45.5, 1.43.10.

  32. CVE-2026-96879 6.9 Moyenne

    The Wikimedia Foundation Mediawiki - FlaggedRevs extension

    Improper removal of sensitive information before storage or transfer vulnerability in Wikimedia Foundation's Mediawiki - FlaggedRevs extension through 1.46.0.

  33. CVE-2026-100380 5.3 Moyenne

    Wikimedia Foundation Mediawiki - Wikibase Extension

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - Wikibase Extension allows Cross-Site Scripting (XSS). This issue affects Mediawiki - Wikibase Extension: from * before 1.46.1, 1.45.5, 1.43.10.

  34. CVE-2026-100378 5.3 Moyenne

    Wikimedia Foundation Mediawiki - Translate Extension

    Missing Authorization vulnerability in Wikimedia Foundation Mediawiki - Translate Extension allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Mediawiki - Translate Extension: from * before 1.46.1, 1.45.5, 1.43.10.

  35. CVE-2026-100377 6.9 Moyenne

    Wikimedia Foundation Mediawiki - WikiLambda Extension

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - WikiLambda Extension allows Excavation. This issue affects Mediawiki - WikiLambda Extension: 1.47.0-alpha. The issue has been remediated on the `master` branch.

  36. CVE-2026-100376 4.8 Moyenne

    Wikimedia Foundation Mediawiki - TemplateSandbox Extension

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - TemplateSandbox Extension allows Cross-Site Scripting (XSS). This issue affects Mediawiki - TemplateSandbox Extension: from * before 1.46.1, 1.45.5, 1.43.10.

  37. CVE-2026-96878 6.9 Moyenne

    The Wikimedia Foundation Mediawiki - Cargo extension

    Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Mediawiki - Cargo extension allows Reflected XSS. This issue affects Mediawiki - Cargo extension: through 3.9.4.

  38. CVE-2026-96877 6.9 Moyenne

    The Wikimedia Foundation Mediawiki - Cargo extension

    Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Mediawiki - Cargo extension allows Reflected XSS. This issue affects Mediawiki - Cargo extension: through 3.9.4.

  39. CVE-2026-96876 6.9 Moyenne

    The Wikimedia Foundation Mediawiki - Cargo extension

    Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Mediawiki - Cargo extension allows Reflected XSS. This issue affects Mediawiki - Cargo extension: through 3.9.4.

  40. CVE-2026-96875 6.9 Moyenne

    The Wikimedia Foundation Mediawiki - Cargo extension

    Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Mediawiki - Cargo extension allows Stored XSS. This issue affects Mediawiki - Cargo extension: through 3.9.4.

  41. CVE-2026-100237 6.1 Moyenne

    The Wikimedia Foundation Mediawiki - Thanks Extension

    Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - Thanks Extension allows Stored XSS. This issue affects Mediawiki - Thanks Extension: from * before 1.43.10/1.45.5/1.46.1.

  42. CVE-2026-96874 2.3 Faible

    The Wikimedia Foundation Mediawiki - Cargo extension

    Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in the Mediawiki - Cargo extension allows Stored XSS. This issue affects Mediawiki - Cargo extension: through 3.9.4.

  43. CVE-2026-96873 5.5 Moyenne

    The Wikimedia Foundation Mediawiki - CirrusSearch Extension

    Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Mediawiki - CirrusSearch extension allows Reflected XSS. This issue affects Mediawiki - CirrusSearch extension through 1.46.0.

  44. CVE-2026-96872 2.9 Faible

    The Wikimedia Foundation Mediawiki - WikiLambda Extension

    Improper handling of insufficient permissions or privileges vulnerability in The Wikimedia Foundation Mediawiki - WikiLambda Extension on Linux, MacOS, and Windows allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Mediawiki - WikiLambda Extension: before 1.47.0.

  45. CVE-2026-14363 9.8 Critique

    The Wikimedia Foundation Mediawiki - Cargo Extension · Mediawiki cargo

    Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in The Wikimedia Foundation Mediawiki - Cargo Extension allows SQL Injection. This issue affects Mediawiki - Cargo Extension: from * before 1.43.9,1.44.6,1.45.4.

  46. CVE-2026-58517 4.3 Moyenne

    The Wikimedia Foundation Mediawiki - WikiLambda Extension · Mediawiki mediawiki

    Improper neutralization of input terminators vulnerability in The Wikimedia Foundation Mediawiki - WikiLambda Extension allows Authentication Bypass. This issue affects Mediawiki - WikiLambda Extension: from * before 1.43.9,1.44.6,1.45.4.

  47. CVE-2026-14358 6.1 Moyenne

    The Wikimedia Foundation Mediawiki - Charts Extension · Mediawiki mediawiki

    Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - Charts Extension allows Cross-Site Scripting (XSS). This issue affects Mediawiki - Charts Extension: from * before 1.43.9,1.44.6,1.45.4.

  48. CVE-2026-58521 9.8 Critique

    The Wikimedia Foundation Mediawiki - Cargo Extension · Mediawiki cargo

    Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in The Wikimedia Foundation Mediawiki - Cargo Extension allows SQL Injection. This issue affects Mediawiki - Cargo Extension: from * before 1.43.9,1.44.6,1.45.4.

  49. CVE-2026-58520 6.1 Moyenne

    The Wikimedia Foundation Mediawiki - UrlShortener Extension · Mediawiki mediawiki

    URL redirection to untrusted site ('open redirect') vulnerability in The Wikimedia Foundation Mediawiki - UrlShortener Extension allows Cross-Site Flashing. This issue affects Mediawiki - UrlShortener Extension: from * before 1.43.9, 1.44.6, 1.45.4.

  50. CVE-2026-8857 8.8 Élevée

    Wikimedia Foundation timeline · Mediawiki mediawiki

    A vulnerability in Wikimedia Foundation timeline. This vulnerability is associated with program files scripts/EasyTimeline.Pl, includes/Timeline.Php. This issue affects timeline: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9.

  51. CVE-2026-58038 6.1 Moyenne

    Wikimedia Foundation timeline · Mediawiki mediawiki

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation timeline. This vulnerability is associated with program files includes/Timeline.Php, scripts/EasyTimeline.Pl. This issue affects timeline: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9.

  52. CVE-2026-58037 6.1 Moyenne

    Wikimedia Foundation MediaWiki · Mediawiki mediawiki

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Language/Language.Php, includes/Logging/BlockLogFormatter.Php, includes/Logging/LogFormatter.Php, includes/Logging/PatrolLogFormatter.Php, includes/Logging/RenameuserLogFormatter.Php, includes/Logging/TagLogFormatter.Php, includes/Specials/SpecialVersion.Php. This issue affects MediaWiki: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9.

  53. CVE-2026-58036 7.5 Élevée

    Wikimedia Foundation MediaWiki · Mediawiki mediawiki

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Api/ApiQueryAllUsers.Php, includes/Api/ApiQueryUsers.Php, includes/Permissions/PermissionManager.Php, includes/User/UserGroupManager.Php.

  54. CVE-2026-58033 6.5 Moyenne

    Wikimedia Foundation MediaWiki · Mediawiki mediawiki

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Actions/InfoAction.Php. This issue affects MediaWiki: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9.

  55. CVE-2026-58032 6.1 Moyenne

    Wikimedia Foundation MediaWiki · Mediawiki mediawiki

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files resources/src/mediawiki.Api/index.Js. This issue affects MediaWiki: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9.

  56. CVE-2026-58030 6.1 Moyenne

    Wikimedia Foundation SyntaxHighlight_GeSHi · Mediawiki mediawiki

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation SyntaxHighlight_GeSHi. This vulnerability is associated with program files includes/SyntaxHighlight.Php. This issue affects SyntaxHighlight_GeSHi: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9.

  57. CVE-2026-58029 6.5 Moyenne

    Wikimedia Foundation MediaWiki · Mediawiki mediawiki

    Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Api/ApiChangeAuthenticationData.Php, includes/Api/ApiLinkAccount.Php, includes/Api/ApiRemoveAuthenticationData.Php, includes/Specials/SpecialLinkAccounts.Php, includes/Specials/SpecialUnlinkAccounts.Php. This issue affects MediaWiki: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9.

  58. CVE-2026-58028 5.4 Moyenne

    Wikimedia Foundation MediaWiki · Wikimedia Foundation CentralAuth · Mediawiki mediawiki

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki, Wikimedia Foundation CentralAuth. This vulnerability is associated with program files includes/Api/ApiFormatBase.Php, includes/Api/ApiHelp.Php, includes/ResourceLoader/Module.Php, includes/Hooks/Handlers/PageDisplayHookHandler.Php, includes/LogFormatter/PermissionChangeLogFormatter.Php. This issue affects MediaWiki: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9; CentralAuth: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9.

  59. CVE-2026-58027 6.5 Moyenne

    Wikimedia Foundation AbuseFilter · Mediawiki mediawiki

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation AbuseFilter. This vulnerability is associated with program files includes/Api/QueryAbuseFilters.Php. This issue affects AbuseFilter: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9.

  60. CVE-2026-58026 5.7 Moyenne

    Wikimedia Foundation MediaWiki · Mediawiki mediawiki

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Parser/Parser.Php. This issue affects MediaWiki: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9.

  61. CVE-2026-58025 9.8 Critique

    Wikimedia Foundation MediaWiki · Mediawiki mediawiki

    Deserialization of untrusted data vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Import/WikiImporter.Php, includes/Import/WikiRevision.Php, includes/Logging/LogEntryBase.Php. This issue affects MediaWiki: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9.

  62. CVE-2026-58024 5.7 Moyenne

    Wikimedia Foundation MediaWiki · Mediawiki mediawiki

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Api/ApiUserrights.Php. This issue affects MediaWiki: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9.

  63. CVE-2026-13707 7.6 Élevée

    Wikimedia Foundation OAuth · Mediawiki mediawiki

    Session fixation vulnerability in Wikimedia Foundation OAuth. This vulnerability is associated with program files src/Backend/MWOAuthServer.Php. This issue affects OAuth: from * through 1.46.0, 1.45.4, 1.44.6, 1.43.9.

  64. CVE-2026-13706 8.8 Élevée

    Wikimedia Foundation UrlShortener · Mediawiki mediawiki

    Improper input validation vulnerability in Wikimedia Foundation UrlShortener. This vulnerability is associated with program files includes/UrlShortenerUtils.Php.

  65. CVE-2026-58035 4.8 Moyenne

    Wikimedia Foundation MediaWiki · Mediawiki mediawiki

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files resources/src/mediawiki.Special.Block/SpecialBlock.Vue.

  66. CVE-2026-58034 4.8 Moyenne

    Wikimedia Foundation CheckUser · Mediawiki mediawiki

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with program files modules/ext.CheckUser.TempAccounts/components/blockConnectedTempAccountsField.Vue. This issue affects CheckUser: from 1.46.0-rc.0 before 1.46.0.

  67. CVE-2026-58031 5.4 Moyenne

    Wikimedia Foundation MediaWiki · Mediawiki mediawiki

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files resources/src/mediawiki.Special.Apisandbox/ApiSandboxLayout.Js. This issue affects MediaWiki: from 1.46.0-rc.0 before 1.46.0.

  68. CVE-2026-58519 5.4 Moyenne

    The Wikimedia Foundation Mediawiki - Cargo Extension · Mediawiki cargo

    Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - Cargo Extension allows Stored XSS. This issue affects Mediawiki - Cargo Extension: from * before 3.9.1.

  69. CVE-2026-58518 6.3 Moyenne

    The Wikimedia Foundation Mediawiki - RedirectManager Extension · Mediawiki mediawiki

    Cross-Site request forgery (CSRF) vulnerability in The Wikimedia Foundation Mediawiki - RedirectManager Extension allows Cross Site Request Forgery. This issue affects Mediawiki - RedirectManager Extension: from * before 1.3.3.

  70. CVE-2026-34095 6.1 Moyenne

    Wikimedia Foundation MediaWiki · Mediawiki mediawiki

    Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Actions/ActionEntryPoint.Php, includes/Request/FauxResponse.Php. This issue affects MediaWiki: from * before 1.43.7, 1.44.4, 1.45.2.

  71. CVE-2026-34094 3.8 Faible

    Wikimedia Foundation MediaWiki · Mediawiki mediawiki

    Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Page/Article.Php. This issue affects MediaWiki: from * before 1.43.7, 1.44.4, 1.45.2.

  72. CVE-2026-34093 5.3 Moyenne

    Wikimedia Foundation MediaWiki · Mediawiki mediawiki

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Specials/SpecialUserRights.Php. This issue affects MediaWiki: from * before 1.43.7, 1.44.4, 1.45.2.

  73. CVE-2026-34092 7.5 Élevée

    Wikimedia Foundation MediaWiki · Mediawiki mediawiki

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Skin/Skin.Php. This issue affects MediaWiki: from * before 1.43.7, 1.44.4, 1.45.2.

  74. CVE-2026-34091 7.5 Élevée

    Wikimedia Foundation MediaWiki · Mediawiki mediawiki

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This issue affects MediaWiki: from * before 1.43.7, 1.44.4, 1.45.2.

  75. CVE-2026-34090 7.5 Élevée

    Wikimedia Foundation CheckUser · Mediawiki checkuser

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation CheckUser. This issue affects CheckUser: from 1.45.0 before 1.45.2.

  76. CVE-2026-34088 7.5 Élevée

    Wikimedia Foundation MediaWiki · Mediawiki mediawiki

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This issue affects MediaWiki: from * before 1.43.7, 1.44.4, 1.45.2.

  77. CVE-2026-34087 7.5 Élevée

    Wikimedia Foundation OATHAuth · Mediawiki mediawiki

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation OATHAuth. This issue affects OATHAuth: from * before 1.43.7, 1.44.4, 1.45.2.