MediaWiki vulnerabilities

6 known vulnerabilities in MediaWiki from Wikimedia Foundation. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  MediaWiki: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-58036Jul 1, 2026Wikimedia Foundation

  Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Api/ApiQueryAllUsers.Php, includes/Api/ApiQueryUsers.Php, includes/Permissions/PermissionMa

• 9.8 Critical severity

  MediaWiki: Improper Control of Generation of Code

  CVE-2026-58025Jul 1, 2026Wikimedia Foundation

  Deserialization of untrusted data vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Import/WikiImporter.Php, includes/Import/WikiRevision.Php, includes/Logging/LogEntryBase.Php. This issue affects Med

• 7.5 High severity

  MediaWiki: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-34092May 11, 2026Wikimedia Foundation

  Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Skin/Skin.Php. This issue affects MediaWiki: from * before 1.43.7, 1.44.4, 1.45.2.

• 7.5 High severity

  MediaWiki: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-34091May 11, 2026Wikimedia Foundation

  Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This issue affects MediaWiki: from * before 1.43.7, 1.44.4, 1.45.2.

• 7.5 High severity

  MediaWiki: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-34088May 11, 2026Wikimedia Foundation

  Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This issue affects MediaWiki: from * before 1.43.7, 1.44.4, 1.45.2.

• 9.8 Critical severity

  Vulnerability in Wikimedia Foundation MediaWiki.

  CVE-2025-67484Feb 3, 2026Wikimedia Foundation

  Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Api/ApiFormatXml.Php. This issue affects MediaWiki: from * before 1.39.16, 1.43.6, 1.44.3, 1.45.1.