Wikimedia Foundation vulnerabilities
We track 41 vulnerabilities in Wikimedia Foundation products across 26 products. 41 are rated high or critical, and none are known to be exploited. The most recent was published on September 30, 2026.
41vulnerabilities
12critical
29high
0exploited
8.4average CVSS score
Latest Wikimedia Foundation vulnerabilities
- 8.2 High severity
Mediawiki - CSS Extension: Improper Encoding or Escaping of Output
Improper Encoding or Escaping of Output vulnerability in The Wikimedia Foundation Mediawiki - CSS Extension allows Code Injection.This issue affects Mediawiki - CSS Extension: from 1.39.X before 1.39.9, from 1.41.X before 1.41.3, from 1.42.X before 1.42.2.