Vulnerability index

Browse CVEs

12 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Managewiki MEDIUM 5.4
CVE-2025-43861

ManageWiki is a MediaWiki extension allowing users to manage wikis. Prior to commit 2f177dc, ManageWiki is vulnerable to reflected or stored XSS in t…

Fix: 2025-04-24+
Fix from $1,600 2025-04-24
Managewiki HIGH 8.0
CVE-2025-32956

ManageWiki is a MediaWiki extension allowing users to manage wikis. Versions before commit f504ed8, are vulnerable to SQL injection when renaming a n…

Fix: 2025-04-20+
Fix from $1,950 2025-04-21
Createwiki MEDIUM 6.1
CVE-2024-47781

CreateWiki is an extension used at Miraheze for requesting & creating wikis. The name of requested wikis is not escaped on Special:RequestWikiQueue, …

Fix: 2024-10-07+
Fix from $1,600 2024-10-07
Wikidiscover MEDIUM 5.4
CVE-2024-47782

WikiDiscover is an extension designed for use with a CreateWiki managed farm to display wikis. Special:WikiDiscover is a special page that lists all …

Fix: 2024-10-06+
Fix from $1,600 2024-10-07
Createwiki MEDIUM 6.5
CVE-2024-29898

CreateWiki is Miraheze's MediaWiki extension for requesting & creating wikis. An oversight during the writing of the patch for CVE-2024-29897 may hav…

Fix: 2024-03-27+
Fix from $1,600 2024-03-28
Managewiki MEDIUM 5.4
CVE-2024-25109

ManageWiki is a MediaWiki extension allowing users to manage wikis. Special:ManageWiki does not escape escape interface messages on the `columns` and…

Fix: 2024-02-09+
Fix from $1,600 2024-02-09
Wikidiscover MEDIUM 6.1
CVE-2024-25107

WikiDiscover is an extension designed for use with a CreateWiki managed farm to display wikis. On Special:WikiDiscover, the `Language::date` function…

Fix: 2023-02-08+
Fix from $1,600 2024-02-08
Createwiki MEDIUM 5.3
CVE-2022-24813

CreateWiki is Miraheze's MediaWiki extension for requesting & creating wikis. Without the patch for this issue, anonymous comments can be made using …

Fix: 2022-04-02+
Fix from $1,600 2022-04-04
Globalnewfiles MEDIUM 6.1
CVE-2021-39186

GlobalNewFiles is a MediaWiki extension maintained by Miraheze. Prior to commit number cee254e1b158cdb0ddbea716b1d3edc31fa4fb5d, the username column …

Fix: 2021-09-01+
Fix from $1,600 2021-09-01
Datadump MEDIUM 5.4
CVE-2021-32774

DataDump is a MediaWiki extension that provides dumps of wikis. Prior to commit 67a82b76e186925330b89ace9c5fd893a300830b, DataDump had no protection …

Fix: 2021-07-07+
Fix from $1,600 2021-07-20
Globalnewfiles MEDIUM 6.5
CVE-2021-32722

GlobalNewFiles is a mediawiki extension. Versions prior to 48be7adb70568e20e961ea1cb70904454a671b1d are affected by an uncontrolled resource consumpt…

Patch available
Fix from $1,600 2021-06-28
Managewiki HIGH 7.5
CVE-2021-29483

ManageWiki is an extension to the MediaWiki project. The 'wikiconfig' API leaked the value of private configuration variables set through the ManageW…

Fix: 2021-04-28+
Fix from $1,950 2021-04-28