[ Vendor · 16 CVEs ]
Wikimedia Foundation
CVEs affecting Wikimedia Foundation published in the last 30 days, plus any Wikimedia Foundation CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-102796 | 29 Sep 2026 | CVSS 7.5 | Wikimedia Foundation Mediawiki - UserPageViewTracker ExtensionImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Wikimedia Foundation Mediawiki -… | |
| CVE-2026-100240 | 29 Sep 2026 | CVSS 9.1 | Wikimedia Foundation Mediawiki - TemplateSandbox ExtensionMissing Authorization vulnerability in Wikimedia Foundation Mediawiki - TemplateSandbox Extension allows Accessing Functionality Not Properly… | |
| CVE-2026-100241 | 29 Sep 2026 | CVSS 7.5 | Wikimedia Foundation Mediawiki - EventBus ExtensionExposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - EventBus Extension allows Excavation… | |
| CVE-2026-100242 | 29 Sep 2026 | CVSS 7.5 | Wikimedia Foundation Mediawiki - DataTransfer ExtensionDependency on Vulnerable Third-Party Component and Uncontrolled Resource Consumption vulnerability in Wikimedia Foundation Mediawiki - DataTransfer… | |
| CVE-2026-100243 | 29 Sep 2026 | CVSS 6.1 | Wikimedia Foundation Mediawiki - WikiSEO ExtensionImproper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - WikiSEO… | |
| CVE-2026-100244 | 29 Sep 2026 | CVSS 7.5 | Wikimedia Foundation Mediawiki - CentralAuth ExtensionExposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - CentralAuth Extension allows Excavation… | |
| CVE-2026-100245 | 29 Sep 2026 | CVSS 6.1 | Wikimedia Foundation Mediawiki - Wikibase ExtensionImproper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki -… | |
| CVE-2026-100238 | 29 Sep 2026 | CVSS 6.1 | Wikimedia Foundation Mediawiki - Flow ExtensionImproper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - Flow… | |
| CVE-2026-100382 | 25 Sep 2026 | CVSS 10.0 | Wikimedia Foundation Mediawiki - ExternalData ExtensionImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Wikimedia Foundation Mediawiki -… | |
| CVE-2026-100383 | 25 Sep 2026 | CVSS 4.8 | Wikimedia Foundation Mediawiki - WikiLambda ExtensionImproper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki -… | |
| CVE-2026-100381 | 25 Sep 2026 | CVSS 5.3 | Wikimedia Foundation Mediawiki - UploadWizard ExtensionImproper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki -… | |
| CVE-2026-100380 | 25 Sep 2026 | CVSS 5.3 | Wikimedia Foundation Mediawiki - Wikibase ExtensionImproper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki -… | |
| CVE-2026-100376 | 25 Sep 2026 | CVSS 4.8 | Wikimedia Foundation Mediawiki - TemplateSandbox ExtensionImproper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki -… | |
| CVE-2026-100377 | 25 Sep 2026 | CVSS 6.9 | Wikimedia Foundation Mediawiki - WikiLambda ExtensionExposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - WikiLambda Extension allows Excavation… | |
| CVE-2026-100378 | 25 Sep 2026 | CVSS 5.3 | Wikimedia Foundation Mediawiki - Translate ExtensionMissing Authorization vulnerability in Wikimedia Foundation Mediawiki - Translate Extension allows Accessing Functionality Not Properly Constrained… | |
| CVE-2026-100379 | 25 Sep 2026 | CVSS 5.3 | Wikimedia Foundation Wikipedia Android AppExposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Wikipedia Android App allows… |