Vendor
Wikimedia Foundation
456 known vulnerabilities in products by Wikimedia Foundation, 0 of them actively exploited (CISA KEV).
Key figures
456
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
24
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| Critical | CVE-2022-29904 | Wikimedia Foundation MediaWiki: SQL Injection | 9.8 | |
| Critical | CVE-2017-0372 | Parameters injection in SyntaxHighlight results in multiple vulnerabilities | 9.8 | |
| Critical | CVE-2017-8809 | Wikimedia Foundation MediaWiki: security vulnerability | 9.8 | |
| High | CVE-2023-45363 | Wikimedia Foundation MediaWiki: Denial of Service | 7.5 | |
| High | CVE-2026-8857 | Full RCE using EasyTimeline Extension | 8.8 | |
| Critical | CVE-2019-12468 | Wikimedia Foundation MediaWiki: Improper Access Control | 9.8 | |
| Critical | CVE-2020-29007 | Wikimedia Foundation Score: Remote Code Execution | 9.8 | |
| Critical | CVE-2015-8009 | Wikimedia Foundation MediaWiki: security vulnerability | 9.8 | |
| High | CVE-2012-4381 | MediaWiki: security vulnerability | 8.1 | |
| Critical | CVE-2014-9487 | Wikimedia Foundation MediaWiki: XML External Entity (XXE) | 9.8 | |
| Critical | CVE-2015-8626 | Wikimedia Foundation MediaWiki: security vulnerability | 9.8 | |
| High | CVE-2015-8008 | Wikimedia Foundation MediaWiki: security vulnerability | 7.5 | |
| High | CVE-2013-1816 | Wikimedia Foundation MediaWiki: Denial of Service | 7.5 | |
| Critical | CVE-2021-31556 | Wikimedia Foundation MediaWiki: security vulnerability | 9.8 | |
| High | CVE-2013-1817 | Wikimedia Foundation MediaWiki: Information Disclosure | 7.5 | |
| Critical | CVE-2022-28205 | Wikimedia Foundation MediaWiki: security vulnerability | 9.8 | |
| High | CVE-2017-0367 | Having LocalisationCache directory default to system tmp directory is insecure | 8.8 | |
| High | CVE-2019-12473 | Wikimedia Foundation MediaWiki: security vulnerability | 7.5 | |
| Critical | CVE-2021-36128 | Wikimedia Foundation MediaWiki: security vulnerability | 9.8 | |
| Critical | CVE-2022-28206 | Wikimedia Foundation MediaWiki: security vulnerability | 9.8 | |
| Medium | CVE-2018-0504 | Information disclosure in Special:Redirect/logid | 6.5 | |
| High | CVE-2013-4572 | Wikimedia Foundation MediaWiki: security vulnerability | 7.5 | |
| High | CVE-2017-8810 | Wikimedia Foundation MediaWiki: security vulnerability | 7.5 | |
| High | CVE-2016-6331 | Wikimedia Foundation MediaWiki: security vulnerability | 7.5 | |
| High | CVE-2019-12474 | Wikimedia Foundation MediaWiki: Information Disclosure | 7.5 |
News
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 26sans-atrisk-mail,
Products
| Product | CVEs | Actively exploited |
|---|---|---|
| Wikimedia Foundation MediaWiki | 417 | 0 |
| Wikimedia Foundation Mediawiki - Cargo Extension | 10 | 0 |
| MediaWiki CheckUser | 9 | 0 |
| Abusefilter | 3 | 0 |
| Visual Editor | 3 | 0 |