mediawiki
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 489 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from December 31, 2004 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Cargo Extension: SQLi in Special:Drilldown
Stored XSS in Wikimedia Chart pie tooltip via Data:*.tab field title
Blocked users can create and edit WikiLambda objects
SQLi in Cargo extension via year range filter
UrlShortener defaults to ineffective validation open to third-party redirects
Remote Code Execution via Unsafe Deserialization in LogItem Import
Full Account Takeover from BotPasswords and OAuth via action=changeauthenticationdata
Pretty-printed API output combined with centralauthtoken allows XSS with certain gadgets
$wgNonincludableNamespaces can be bypassed by embedding redirect in other namespaces
Full RCE using EasyTimeline Extension
Monitor mediawiki in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.