the-wikimedia-foundation

Top products

The 15 most recently published vulnerabilities affecting the-wikimedia-foundation.

• CVE-2026-96872WikiLambda public function execution bypasses the unsaved-code permission through nested Z825 compositionsSep 23, 2026
• CVE-2026-14363Cargo Extension: SQLi in Special:Drilldown9.8Jul 1, 2026
• CVE-2026-14358Stored XSS in Wikimedia Chart pie tooltip via Data:*.tab field title6.1Jul 1, 2026
• CVE-2026-58517Blocked users can create and edit WikiLambda objects4.3Jul 1, 2026
• CVE-2026-58521SQLi in Cargo extension via year range filter9.8Jul 1, 2026
• CVE-2026-58520UrlShortener defaults to ineffective validation open to third-party redirects6.1Jul 1, 2026
• CVE-2026-58519Stored XSS through Cargo's map format5.4Jul 1, 2026
• CVE-2026-58518Cross-Site request forgery (CSRF) vulnerability in The Wikimedia Foundation Mediawiki - RedirectManager Extension allows Cross Site Request Forgery. This issue affects Mediawiki - RedirectManager ...6.3Jul 1, 2026
• CVE-2026-39936Stored XSS in Score due to usage of non-reserved data attributesApr 7, 2026
• CVE-2026-39935XSS-via-i18n in localised wiki namesApr 7, 2026
• CVE-2026-39934Growth Experiments ReassignMenteesJob runs as an infinite loopApr 7, 2026
• CVE-2026-39933Multiple XSS vulnerabilities in GlobalWatchlistApr 7, 2026
• CVE-2026-39937Global vanishing does not completely remove user emailApr 7, 2026
• CVE-2026-22711Stored XSS through system messages in WikiLoveApr 7, 2026
• CVE-2025-11175DiscussionTools should use better regexJan 30, 2026