How many Wikimedia Foundation mediawiki CVEs are in CISA KEV?

None of Wikimedia Foundation mediawiki's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of Wikimedia Foundation mediawiki are affected?

737 distinct Wikimedia Foundation mediawiki versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Wikimedia Foundation mediawiki CVEs?

Wikimedia Foundation mediawiki's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-20 (Improper Input Validation).

How many critical Wikimedia Foundation mediawiki vulnerabilities are there?

Wikimedia Foundation mediawiki has 16 critical and 49 high-severity CVEs.

What is the average severity of Wikimedia Foundation mediawiki CVEs?

The average CVSS base score across Wikimedia Foundation mediawiki's scored CVEs is 5.4.

Wikimedia Foundation mediawiki Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: Wikimedia Foundation mediawiki vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

Wikimedia Foundation mediawiki Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

Wikimedia Foundation mediawiki has 287 published CVE records since 2015, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 98 have a known public exploit. The average CVSS base score across scored CVEs is 5.4.

Severity and exploitation

How the CVSS severity of Wikimedia Foundation mediawiki's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical16

High49

Medium175

Low23

24 additional CVEs have no CVSS severity score.

In CISA’s Known Exploited Vulnerabilities catalog

None of Wikimedia Foundation mediawiki's CVEs are currently listed in CISA's KEV catalog.

Public exploits

98 of Wikimedia Foundation mediawiki's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every Wikimedia Foundation mediawiki version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

1.1.0212 CVEs
1.3.0beta1212 CVEs
1.5.0alpha1209 CVEs
1.5.0alpha2209 CVEs
1.5.0beta1209 CVEs
1.5.0beta2209 CVEs
1.5.0beta3209 CVEs
1.5.0beta4209 CVEs
1.6.0209 CVEs
1.35.0-rc.080 CVEs
1.35.0-rc.180 CVEs
1.35.073 CVEs

Common weakness types

The CWE weakness categories most often found in Wikimedia Foundation mediawiki CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Wikimedia Foundation mediawiki CVEs were published each year.

2015

2017

2018

2019

2020

2021

2022

Other Wikimedia Foundation products

Browse vulnerabilities for other products by Wikimedia Foundation.

mediawiki/core26 CVEs Mediawiki - Cargo Extension14 CVEs CheckUser9 CVEs Mediawiki - WikiLambda Extension6 CVEs Mediawiki - CentralAuth Extension5 CVEs Mediawiki - GrowthExperiments Extension4 CVEs Mediawiki - SecurePoll extension4 CVEs

Frequently asked questions

Common questions about Wikimedia Foundation mediawiki vulnerabilities.

How many CVEs does Wikimedia Foundation mediawiki have?: Wikimedia Foundation mediawiki has 287 published CVE records since 2015.
How many Wikimedia Foundation mediawiki CVEs are in CISA KEV?: None of Wikimedia Foundation mediawiki's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Wikimedia Foundation mediawiki vulnerabilities?: Yes — 98 of Wikimedia Foundation mediawiki's CVEs have a known public exploit.
Which versions of Wikimedia Foundation mediawiki are affected?: 737 distinct Wikimedia Foundation mediawiki versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Wikimedia Foundation mediawiki CVEs?: Wikimedia Foundation mediawiki's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-20 (Improper Input Validation).
How many critical Wikimedia Foundation mediawiki vulnerabilities are there?: Wikimedia Foundation mediawiki has 16 critical and 49 high-severity CVEs.
What is the average severity of Wikimedia Foundation mediawiki CVEs?: The average CVSS base score across Wikimedia Foundation mediawiki's scored CVEs is 5.4.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Wikimedia Foundation mediawiki vulnerabilities

Get an alert for each new Wikimedia Foundation mediawiki CVE, with AI-written analysis and remediation steps.

Create an account See pricing

Version ranges

<= 9.030 CVEs
<= 3327 CVEs
<= 10.018 CVEs
< 1.39.413 CVEs
1.40.0 <= v < 1.40.113 CVEs
< 1.35.312 CVEs
<= 3412 CVEs
< 1.35.511 CVEs
< 1.39.14, 1.43.4, 1.44.111 CVEs
< 1.41.111 CVEs
<= 7.011 CVEs
1.36.0 <= v < 1.36.311 CVEs
1.37.0 <= v < 1.37.111 CVEs
< 1.35.110 CVEs
< 1.35.1210 CVEs
< 1.36.310 CVEs
< 1.44.010 CVEs
1.36.0 <= v < 1.39.510 CVEs
<= 359 CVEs
< 1.36.18 CVEs
< 1.46.0, 1.45.4, 1.44.6, 1.43.98 CVEs
1.32.0 <= v < 1.35.28 CVEs
< 1.37.37 CVEs
<= 377 CVEs
< 1.31.126 CVEs
< 1.43.7, 1.44.4, 1.45.26 CVEs
<= 1.39.0-rc06 CVEs
<= 1.39.0-rc16 CVEs
<= 11.06 CVEs
1.32.0 <= v < 1.34.46 CVEs
< 1.35.25 CVEs
< 1.35.95 CVEs
1.36.0 <= v < 1.38.55 CVEs
1.39.0 <= v < 1.39.15 CVEs
< 1.31.104 CVEs
< 1.39.12, 1.42.6, 1.43.14 CVEs
< 1.39.16, 1.43.6, 1.44.3, 1.45.14 CVEs
<= 404 CVEs
1.37.0 <= v < 1.37.24 CVEs
< 1.35.63 CVEs
< 1.35.83 CVEs
< 1.36.23 CVEs
< 1.37.13 CVEs
< 1.37.23 CVEs
<= 1.37.0-rc03 CVEs
<= 1.37.0-rc13 CVEs
<= 1.37.0-rc23 CVEs
<= 363 CVEs
1.36.0 <= v < 1.36.43 CVEs
1.36.0 <= v < 1.37.53 CVEs
1.38.0 <= v < 1.38.33 CVEs
1.46.0-rc.0 <= v < 1.46.03 CVEs
< 1.31.132 CVEs
< 1.34.12 CVEs
< 1.34.42 CVEs
< 1.35.112 CVEs
< 1.44.3, 1.45.12 CVEs
<= 1.38.0-rc02 CVEs
<= 1.38.0-rc12 CVEs
<= 1.40.0-rc02 CVEs
<= 12.02 CVEs
1.36.0 <= v < 1.38.72 CVEs
1.38.0 <= v < 1.38.12 CVEs
1.39.0 <= v < 1.39.42 CVEs
< 1.3.81 CVE
< 1.31.151 CVE
< 1.31.161 CVE
< 1.31.81 CVE
< 1.35.01 CVE
< 1.35.101 CVE
< 1.35.141 CVE
< 1.35.71 CVE
< 1.38.21 CVE
< 1.38.31 CVE
< 1.39.11 CVE
< 1.39.13, 1.42.7 1.43.2, 1.44.01 CVE
< 1.39.13, 1.42.7, 1.43.2, 1.44.01 CVE
< 1.39.15, 1.43.5, 1.44.21 CVE
< 1.42.6, 1.43.11 CVE
< 1.43.6, 1.44.3, 1.45.11 CVE
< 1.44.11 CVE
< 2025-05-261 CVE
<= 1.39.12, 1.42.76 1.43.1, 1.44.01 CVE
<= 301 CVE
<= 311 CVE
<= 321 CVE
>= 1.42.01 CVE
1.12.0 <= v < 1.35.11 CVE
1.31.10 <= v < 1.31.111 CVE
1.32.0 <= v < 1.33.41 CVE
1.32.0 <= v < 1.35.31 CVE
1.33.0 <= v < 1.35.11 CVE
1.34.0 <= v < 1.34.21 CVE
1.34.0 <= v < 1.34.41 CVE
1.35.0 <= v < 1.35.11 CVE
1.35.0 <= v < 1.35.41 CVE
1.36.0 <= v < 1.36.11 CVE
1.36.0 <= v < 1.36.21 CVE
1.36.0 <= v < 1.37.31 CVE
1.36.0 <= v < 1.38.61 CVE
1.36.0 <= v < 1.39.61 CVE
1.39.0 <= v < 1.39.21 CVE
1.39.0 <= v < 1.39.31 CVE
1.39.0 <= v < 1.39.51 CVE
1.40.0 <= v < 1.40.21 CVE
1.43.0 <= v < 1.43.11 CVE

Fixed in

1.36.321 CVEs
50755a861e6e748cf8bac24e8cdd5e83db01808119 CVEs
a36f3bc851a8ae3377ee5602b7e2a355d59e7b0e17 CVEs
ea7980d473268e0ef28c64328a1325f8f4e414b617 CVEs
1.39.415 CVEs
1.37.114 CVEs
1.35.113 CVEs
1.35.213 CVEs
1.35.313 CVEs
1.40.113 CVEs
1.35.511 CVEs
1.39.14, 1.43.4, 1.44.111 CVEs
1.39.511 CVEs
1.41.111 CVEs
1c409c54d4ed3767d216b2a332ae1daeef35790911 CVEs
1e3757f7f2e2a06ccd5c4f962753b8c9abe1fed611 CVEs
819c0d21addeed5336244cb9b776fe83a7b2279e11 CVEs
8b874ff6c6ed5f209dfd0c825c5b310ef1ecca2f11 CVEs
b24aa9d8f87e8762c8dedc2f30f85383b77d472511 CVEs
1.35.1210 CVEs
1.44.010 CVEs
4db15f479679fa4102789af77077c357af46250110 CVEs
b886c60c6af24561c805d1d7a2dd6cc0618a53c710 CVEs
c4b6b0912db6e5e4d3c0368226d4a164a1fc9fc310 CVEs
ee574ec7a22fd0c77f86565fb6b8a31572d8b4fc10 CVEs
1.34.49 CVEs
1.36.19 CVEs
e34e7f20b51ed7514ba6de8d8a390363ade2237f9 CVEs
1.37.38 CVEs
1.46.0, 1.45.4, 1.44.6, 1.43.98 CVEs
e5823c068a2e0d8af72538fe5cd152ddb43c58e98 CVEs
f8e3a1e258ab6beabb18dca2af983ef1647970c98 CVEs
02f60e14ba59bfe6d4533054d7951887bc5f37027 CVEs
1.37.27 CVEs
1367e89489e17de24356ad6d3c473a649ee3a03b7 CVEs
3406e1b7d014d22f2a68237ebf447a88b5ac74ed7 CVEs
49fde28a202bfbc89650908d8f5b55339d4bc8b67 CVEs
5951e3e30351dbef4afaceccad415b7702d49bc07 CVEs
59b795f1b1b2f664b0f9d966b93f8a3347d3d17c7 CVEs
72a8777aa8598d163206f49ac44ec41c818391a07 CVEs
a720399187069dd4134bdbcc33bce3fc09b7b6587 CVEs
d97186dd0b639fe0d4e98e839df52497f2a632a77 CVEs
1.31.126 CVEs
1.39.16 CVEs
1.43.7, 1.44.4, 1.45.26 CVEs
3e26b5ff1468f98cf306575d125b29a6645bf2ea6 CVEs
b1558252c5478239b6ecc6d1950f07f938b126046 CVEs
ef13e11da4bcab62a8cc6f5459cd094e6881f3266 CVEs
0af28b77ee97ff26c62ce647bb12963adde19d225 CVEs
1.35.95 CVEs
1.38.55 CVEs
1b1d48cd6fa6d7aed8f8c3fc3e729ba0078152e75 CVEs
4a804b4950cd62bfbd1991471308e27793ab2a275 CVEs
6f1ddad4f5437224db593396eb121a15580ec6f45 CVEs
7bb0aeb9dc77558628aece8e0827c8928f6e056c5 CVEs
0fa7240e6a81be24dc0eb3c250ec2a25a2099faa4 CVEs
1.31.104 CVEs
1.36.24 CVEs
1.38.34 CVEs
1.39.12, 1.42.6, 1.43.14 CVEs
1.39.13, 1.42.7 1.43.2, 1.44.04 CVEs
1.39.16, 1.43.6, 1.44.3, 1.45.14 CVEs
30d9707511274f256db07dc71010ae0bc6e33d284 CVEs
364e92c494bf4f60c6ed4a876262d46c570c07704 CVEs
36da63d008b7a2f9de929113b99bc7059831cb904 CVEs
c4be99fcac8e32df28c607fe5a98734e838821134 CVEs
f65f9d6971578b301ef9fc915a729e6a13266a5e4 CVEs
0ab2de45d1de5e84eace4ab210b6b67b4fc4bf9d3 CVEs
1.35.63 CVEs
1.35.83 CVEs
1.36.43 CVEs
1.37.53 CVEs
1.46.03 CVEs
19c5cf34a22f599467644f206f537aa78f50efd43 CVEs
370d89fff96c8c378651d93cb0bb183d4ff76e3e3 CVEs
76572f7b8bc7bd3a9dfb73e3d9a08e56a06266f73 CVEs
a4c806563471b16c644186618b39b84069c0d04c3 CVEs
d063f3bcce7b9694074218cb09d3c693b45bb0033 CVEs
059c8e1b9a315c36ae827f929ea9a077acbba2eb2 CVEs
1.31.132 CVEs
1.34.12 CVEs
1.35.112 CVEs
1.38.12 CVEs
1.38.72 CVEs
1.44.3, 1.45.12 CVEs
13cc1d3309d315a7111ca808eacd1718f8321eb12 CVEs
1d62ca6ec30099e7e9d6c554693a4b8e88e911392 CVEs
3324d89080922a0853b23e0019ad3a48a4ff389a2 CVEs
63da3569472b40c3be833d392b7ce1843a5cbf622 CVEs
78458ed106076061322977f86f5140d468de63a32 CVEs
b8d14e9d292f1199b959b9ce26d99f72bf9354062 CVEs
c4075dfdbcb51df3c922aef582cf5b40917595952 CVEs
dc63efabf7afc624f5e1f06478b91182bfecaad42 CVEs
03021aff27a3047a2b5c6aec0d95966a07bd25831 CVE
07ed5049d9381cdd55830d9f296e5514d95348cf1 CVE
0f21d5c6a37f7baa19c33a4f96bc04ab7992ca421 CVE
1.3.81 CVE
1.31.111 CVE
1.31.151 CVE
1.31.161 CVE
1.31.81 CVE
1.33.41 CVE
1.34.21 CVE
1.35.01 CVE
1.35.101 CVE
1.35.141 CVE
1.35.41 CVE
1.35.71 CVE
1.38.21 CVE
1.38.61 CVE
1.39.13, 1.42.7, 1.43.2, 1.44.01 CVE
1.39.15, 1.43.5, 1.44.21 CVE
1.39.21 CVE
1.39.31 CVE
1.39.61 CVE
1.40.21 CVE
1.42.6, 1.43.11 CVE
1.43.11 CVE
1.43.6, 1.44.3, 1.45.11 CVE
1.44.11 CVE
154b04d2a4e9855e3b21cbe98267f7f048911f6d1 CVE
18c2d20c54f9851af639cb24603493ca197baaa81 CVE
2025-05-261 CVE
20d2594916db454cf331536fa8ceb544f418fc621 CVE
2303b05125b2cc046a20d614786174ea803143eb1 CVE
2fdadd4096268cebab8fbc2f245dd441e2f055361 CVE
35e6747afdebbf565d03bfc261c547a9cbad6e701 CVE
4a3d6a63f4656877f454f050355ee565b97f40f41 CVE
622dab8dacffd08ec092071ee78499c62e9363911 CVE
737bdca2738a4076a3fd193e15099f501fa2163a1 CVE
73dd5f50537b9f72f70ca53c723124a2d26c14271 CVE
748c5eae2fd5d897c94c48771161c259941a74881 CVE
75c8f0aa3abe70b22058fb2de7d41c3eac8b6aba1 CVE
75f04e1f7b6f46af9437a34ecf72b1953c5ab59c1 CVE
781caf83dba90c18349f930bbaaa0e89f003f8741 CVE
8d00acfb43e9bd03ba7711126b03e9e6eaa918d51 CVE
8f927cbf330b6ee6e675fb92435b7ee9337361891 CVE
923676858a9521c96b7051641010d920796bb4081 CVE
9e5a0b8dda9b7182cdda422fb88db5adc0f7d0071 CVE
b2a11b6991c9aafa44dd5bc743746123849eafb31 CVE
b6cf6b337262ed84b76e96ed0f7ccbb702a46e9c1 CVE
c759d64146ad3d48c316b0052b7e240def4634da1 CVE
db844fb107e8a74e0c8a7455012a20f977fa790d1 CVE
e4aa8ad2154d1ad779c9f76efb64f3716fb3f5301 CVE
ed6df93416845d268d2469670491b9ae222ab9e71 CVE
fcec450db417b2b2887baa480adcfed28f0789381 CVE