MediaWiki / Checkuser
8 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2023-37252 | An issue was discovered in the CheckUser extension for MediaWiki through 1.39.3. Special:CheckUserLog shows usernames that have been hidden. | LOW | 3.1 | Sep 14, 2026 |
| CVE-2026-34090 | Suggested investigations: Handle suppressed usernames | MEDIUM | 4.8 | May 11, 2026 |
| CVE-2025-67478 | Wrong E-Mail address composition for usernames with a comma and Umlauts in it like "Döe, Jähn" | HIGH | 8.8 | Feb 3, 2026 |
| CVE-2025-61658 | Special:GlobalContributions shows edits on wikis the viewer doesn't have access to | LOW | 1.3 | Feb 3, 2026 |
| CVE-2025-61651 | i18n XSS through Special:CheckUser CheckUser helper | MEDIUM | 6.1 | Feb 3, 2026 |
| CVE-2025-61648 | Stored XSS through system messages in CheckUser | MEDIUM | 6.1 | Feb 3, 2026 |
| CVE-2019-16529 | An issue was discovered in the CheckUser extension through 1.35.0 for MediaWiki. Oversighted edit summaries are still visible in CheckUser results in violation… | MEDIUM | 5.3 | Mar 19, 2020 |
| CVE-2019-18611 | An issue was discovered in the CheckUser extension through 1.34 for MediaWiki. Certain sensitive information within oversighted edit summaries made available v… | MEDIUM | 6.5 | Oct 29, 2019 |
| CVE-2015-2940 | Cross-site request forgery (CSRF) vulnerability in the CheckUser extension for MediaWiki allows remote attackers to hijack the authentication of certain users… | MEDIUM | 6.8 | Apr 13, 2015 |
Showing 1 to 8 of 8 CVEs