Known vulnerabilities in MediaWiki

Software: MediaWiki
Software CPE: cpe:2.3:a:mediawiki_org:mediawiki:*:*:*:*:*:*:*:*
Total vulnerabilities: 293
Public exploits: 4
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting MediaWiki MediaWiki is affected by 293 known vulnerabilities: 16 high, 128 medium, 149 low Critical High Medium Low

Vulnerabilities (293)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU113755 - Improper Authentication
CVE-2025-6926
CWE-287 Medium
No
No
1.39.13, 1.42.7, 1.43.2 07.08.2025 SB2025080751
SB2025080752
#VU113754 - Improper Access Control
CVE-2025-6927
CWE-284 Low
No
No
1.43.2 07.08.2025 SB2025080751
#VU113752 - Improper Authentication
CVE-2025-6597
CWE-287 Low
No
No
1.39.13, 1.42.7, 1.43.2 07.08.2025 SB2025080751
SB2025080752
#VU113751 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-6596
CWE-79 Low
No
No
1.42.7, 1.43.2 07.08.2025 SB2025080751
#VU113750 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-6595
CWE-79 Medium
No
No
1.39.13, 1.42.7, 1.43.2 07.08.2025 SB2025080751
SB2025080752
#VU113749 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-6594
CWE-79 Low
No
No
1.39.13, 1.42.7, 1.43.2 07.08.2025 SB2025080751
SB2025080752
#VU113748 - Exposure of sensitive information to an unauthorized actor
CVE-2025-6593
CWE-200 Low
No
No
1.39.13, 1.42.7, 1.43.2 07.08.2025 SB2025080751
SB2025080752
#VU113746 - Session Fixation
CVE-2025-6592
CWE-384 Low
No
No
1.43.2 07.08.2025 SB2025080751
#VU113745 - Improper input validation
CVE-2025-6591
CWE-20 Low
No
No
1.39.13, 1.42.7, 1.43.2 07.08.2025 SB2025080751
SB2025080752
#VU113744 - Improper Access Control
CVE-2025-6590
CWE-284 Medium
No
No
1.39.13, 1.42.7, 1.43.2 07.08.2025 SB2025080751
SB2025080752
#VU113743 - Permissions, Privileges, and Access Controls
CVE-2025-6589
CWE-264 Low
No
No
1.39.13, 1.42.7, 1.43.2 07.08.2025 SB2025080751
#VU113742 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-32072
CWE-79 Low
No
No
1.39.13, 1.42.7, 1.43.2 07.08.2025 SB2025080751
SB2025080752
#VU89214 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-29134
CWE-89 High
No
No
1.39.7, 1.40.3, 1.41.1 07.05.2024 SB2024050729
#VU89213 - Improper Access Control
CVE-2024-34502
CWE-284 Medium
No
No
1.39.7, 1.40.3, 1.41.1 07.05.2024 SB2024050729
#VU89212 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-34500
CWE-79 Low
No
No
1.39.7, 1.40.3, 1.41.1 07.05.2024 SB2024050729
#VU89211 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-25107
CWE-79 Low
No
No
1.39.7, 1.40.3, 1.41.1 07.05.2024 SB2024050729
#VU89207 - Cross-Site Request Forgery (CSRF)
CVE-2024-34504
CWE-352 Low
No
No
1.39.7, 1.40.3, 1.41.1 07.05.2024 SB2024050729
#VU89206 - Cross-Site Request Forgery (CSRF)
CVE-2024-34503
CWE-352 Low
No
No
1.39.7, 1.40.3, 1.41.1 07.05.2024 SB2024050729
#VU89205 - Cross-Site Request Forgery (CSRF)
CVE-2024-34501
CWE-352 Low
No
No
1.39.7, 1.40.3, 1.41.1 07.05.2024 SB2024050729
#VU89200 - Improper Access Control
CVE-2024-34505
CWE-284 Medium
No
No
1.39.7, 1.40.3, 1.41.1 07.05.2024 SB2024050729


Showing elements 1 - 20 out of 293