Threat database

CVE-2026-39937 is a high-severity vulnerability in The Wikimedia Foundation's Mediawiki CentralAuth Extension involving improper removal of sensitive information before storage or transfer, leading to potential resource leak exposure. The issue affects multiple release branches including MediaWiki versions 1.43, 1.44, and 1.45 and has been remediated on the master branch and these release branches. The vulnerability has a CVSS 4.0 score of 8.8, indicating a significant risk. There are no known exploits in the wild at this time. The vulnerability is not related to a cloud service, and no official remediation level or patch links are provided in the data, but the vendor states the issue is fixed in the specified branches.

Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in WikiWorks Mediawiki - Cargo Extension allows Stored XSS.This issue affects Mediawiki - Cargo Extension: before 3.8.7.

Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Wikimedia Foundation Mediawiki - Cargo Extension allows Stored XSS.This issue affects Mediawiki - Cargo Extension: before 3.8.7.

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Wikimedia Foundation Mediawiki - Cargo Extension allows XSS Targeting Non-Script Elements.This issue affects Mediawiki - Cargo Extension: before 3.8.7.

Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Wikimedia Foundation Mediawiki - Cargo Extension allows Stored XSS.This issue affects Mediawiki - Cargo Extension: before 3.8.7.

CVE-2026-39838 is a cross-site scripting (XSS) vulnerability in the ProofreadPage Extension of Wikimedia Foundation's MediaWiki. It involves improper neutralization of input during web page generation, allowing XSS targeting non-script elements. The vulnerability has been fixed in the master branch and release branches for MediaWiki versions 1.43, 1.44, and 1.45. The CVSS 4.0 base score is 6.9, indicating medium severity. There are no known exploits in the wild and no official patch links provided in this data.

CVE-2026-5762 is a medium severity vulnerability in the Wikimedia Foundation's MediaWiki ReportIncident Extension. It involves allocation of resources without limits or throttling, which can lead to an HTTP Denial of Service (DoS) condition. The issue affects versions 0 through 1.45 of the extension. A fix has been applied only on the master branch, but no official patch or remediation level has been confirmed for released versions. There are no known exploits in the wild at this time.

CVE-2026-22711 is a medium severity vulnerability in the Wikimedia Foundation's Mediawiki Wikilove Extension involving improper neutralization of alternate cross-site scripting (XSS) syntax. This flaw allows XSS attacks due to insufficient sanitization of input. The issue has been fixed in the master branch and release branches for MediaWiki versions 1.43, 1.44, and 1.45. No known exploits are reported in the wild. The vulnerability has a CVSS 4.0 base score of 6.9, indicating a moderate risk level.

Vulnerability in Wikimedia Foundation Scribunto, Wikimedia Foundation luasandbox. This vulnerability is associated with program files includes/Engines/LuaCommon/lualib/mwInit.Lua, library.C. This issue affects Scribunto: from * before 1.39.16, 1.43.6, 1.44.3, 1.45.1; luasandbox: from * before fea2304f8f6ab30314369a612f4f5b165e68e95a.

Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Import/ImportableOldRevisionImporter.Php. This issue affects MediaWiki: from * before 1.44.3, 1.45.1.

Vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with program files src/GlobalContributions/GlobalContributionsPager.Php. This issue affects CheckUser: from * before 1.43.4, 1.44.1.

Vulnerability in Wikimedia Foundation TextExtracts. This vulnerability is associated with program files includes/ApiQueryExtracts.Php. This issue affects TextExtracts: from * before 1.39.14, 1.43.4, 1.44.1.

Vulnerability in Wikimedia Foundation DiscussionTools.This issue affects DiscussionTools: from * before 1.43.4, 1.44.1.

Vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with program files src/Services/CheckUserUserInfoCardService.Php. This issue affects CheckUser: from 7cedd58781d261f110651b6af4f41d2d11ae7309.

CVE-2025-61650 is a low-severity Cross-site Scripting (XSS) vulnerability in the Wikimedia Foundation's CheckUser tool, specifically in the CheckUserUserInfoCardService.php file. It involves improper neutralization of input during web page generation, allowing potentially malicious scripts to be executed in the context of users with high privileges. The vulnerability affects all versions prior to commit 795bf333272206a0189050d975e94b70eb7dc507. Exploitation requires privileged access and user interaction, limiting its impact. No known exploits are currently in the wild. While the CVSS score is low (1.1), the vulnerability could be leveraged in targeted attacks against administrators or trusted users. European organizations using Wikimedia's CheckUser tool should monitor for patches and apply them promptly. Mitigation includes strict input validation, output encoding, and restricting access to the CheckUser interface.

Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/RecentChanges/EnhancedChangesList.Php. This issue affects MediaWiki: from * before 1.39.14, 1.43.4, 1.44.1.

Vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with program files src/Api/Rest/Handler/UserInfoHandler.Php. This issue affects CheckUser: from a3dc1bbcc33acbcca6831d6afaccbb1054c93a57, 0584eb2ad564648aa3ce9c555dd044dda02b55f4.

CVE-2025-61639 is a low-severity vulnerability in Wikimedia Foundation's MediaWiki software that causes exposure of sensitive information to unauthorized actors. It affects multiple program files related to logging and recent changes in MediaWiki versions prior to 1.39.14, 1.43.4, and 1.44.1. The vulnerability allows an unauthenticated attacker to access sensitive data without user interaction. Although the CVSS score is low (1.

Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/api/ApiQueryAllPages.Php. This issue affects MediaWiki: from * before 1.39.14, 1.43.4, 1.44.1.

CVE-2025-61643 is a low-severity vulnerability in the Wikimedia Foundation's MediaWiki software affecting versions prior to 1.39.14, 1.43.4, and 1.44.1. The issue is located in the RecentChangeRCFeedNotifier.php file, potentially impacting the recent changes feed functionality. The CVSS 4.