CVE security advisories and vulnerability history for mediawiki by Wikimedia Foundation.
287
Total CVEs
Published
0
In CISA KEV
Exploited in the wild
31
Public exploits
PoC or exploit code
5.3
Avg CVSS
2015–2026
Last updated
Overview
Wikimedia Foundation mediawiki has 287 published CVE records since 2015, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 31 have a known public exploit. The average CVSS base score across scored CVEs is 5.3.
This page aggregates every publicly disclosed vulnerability (CVE) affecting Wikimedia Foundation mediawiki, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.
Severity and exploitation
How the CVSS severity of Wikimedia Foundation mediawiki's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
Critical16
High47
Medium174
Low19
31 additional CVEs have no CVSS severity score.
In CISA’s Known Exploited Vulnerabilities catalog
0
None of Wikimedia Foundation mediawiki's CVEs are currently listed in CISA's KEV catalog.
Public exploits
31
31 of Wikimedia Foundation mediawiki's CVEs have a known public exploit available.
Affected versions and CVEs
Browse every Wikimedia Foundation mediawiki version named in a CVE, then pick one to see only the CVEs that affect it.
Common questions about Wikimedia Foundation mediawiki vulnerabilities.
How many CVEs does Wikimedia Foundation mediawiki have?
Wikimedia Foundation mediawiki has 287 published CVE records since 2015.
How many Wikimedia Foundation mediawiki CVEs are in CISA KEV?
None of Wikimedia Foundation mediawiki's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Wikimedia Foundation mediawiki vulnerabilities?
Yes — 31 of Wikimedia Foundation mediawiki's CVEs have a known public exploit.
Which versions of Wikimedia Foundation mediawiki are affected?
621 distinct Wikimedia Foundation mediawiki versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Wikimedia Foundation mediawiki CVEs?
Wikimedia Foundation mediawiki's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')).
How many critical Wikimedia Foundation mediawiki vulnerabilities are there?
Wikimedia Foundation mediawiki has 16 critical and 47 high-severity CVEs.
What is the average severity of Wikimedia Foundation mediawiki CVEs?
The average CVSS base score across Wikimedia Foundation mediawiki's scored CVEs is 5.3.
