Product by Wikimedia Foundation
Checkuser
9 known vulnerabilities in Checkuser (Wikimedia Foundation), 0 of them actively exploited (CISA KEV).
Key figures
9
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2025-67478 | Wrong E-Mail address composition for usernames with a comma and Umlauts in it like "Döe, Jähn" | 8.8 | |
| High | CVE-2026-34090 | Suggested investigations: Handle suppressed usernames | 7.5 | |
| Medium | CVE-2026-58034 | Wikimedia Foundation CheckUser: Cross-site Scripting | 4.8 | |
| Medium | CVE-2025-61651 | i18n XSS through Special:CheckUser CheckUser helper | 6.1 | |
| Medium | CVE-2025-61648 | Stored XSS through system messages in CheckUser | 6.1 | |
| Medium | CVE-2025-61658 | Special:GlobalContributions shows edits on wikis the viewer doesn't have access to | 4.3 | |
| Low | CVE-2025-61649 | Wikimedia Foundation CheckUser: security vulnerability | — | |
| Low | CVE-2025-61650 | UserInfoCard is vulnerable to message key stored XSS | — | |
| Low | CVE-2025-61647 | Wikimedia Foundation CheckUser: security vulnerability | — |