Vulnerabilidades en Wikimedia Foundation
152 resultadosCVE-2025-61641LOWAPI list=allpages with maxsize is making really slow queriesEPSS 0.3%CVE-2026-102796HIGHUnauthenticated SQL injection in UserPageViewTracker via filterusers and ignoreusers parametersEPSS 0.3%CVE-2025-6595NONEImproper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MultimediaEPSS 0.3%CVE-2025-6594NONEXSS in Special:ApiSandboxEPSS 0.3%CVE-2025-52738MEDIUMWordPress Wikipedia Preview plugin <= 1.15.0 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-23080MEDIUMXSSes in Special:BadgeViewEPSS 0.3%CVE-2025-61652LOWAction API discussiontoolspageinfo does not check for authorizeRead for the pageEPSS 0.3%CVE-2025-67479NONEMagic word replacement in legacy parser allows using reserved data attributes through wikitextEPSS 0.3%CVE-2026-58032MEDIUMmw.Api.getErrorMessage() may return injected HTML if used without errorformat=htmlEPSS 0.3%CVE-2026-100240CRITICALTemplateSandbox does not check read permissions for the page being previewedEPSS 0.3%CVE-2025-61657NONEImproper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Vector. ThEPSS 0.3%CVE-2026-100376MEDIUMTemplateSandbox can be abused for XSS by asking another user to preview a page with a certain sandbox prefixEPSS 0.3%CVE-2025-61650LOWUserInfoCard is vulnerable to message key stored XSSEPSS 0.3%CVE-2025-61644NONEi18n XSS through Special:WatchlistEPSS 0.3%CVE-2026-34091MEDIUMUser localization leaked by AbuseFilter + EventStreamEPSS 0.3%CVE-2026-34088LOWRecentChanges entries expose suppressed content via generated log page htmlEPSS 0.3%CVE-2025-53486MEDIUMWikiCategoryTagCloud: Reflected Cross-Site Scripting (XSS) via linkstyle attribute in parser functionEPSS 0.3%CVE-2025-67476LOWImporting leaks IP address of importer via EventStreamsEPSS 0.3%CVE-2026-58034NONEStored XSS through a system message when blocking a temporary account that's related to other temporary accountsEPSS 0.3%CVE-2026-58035NONEStored XSS through a system message in the codex version of Special:BlockEPSS 0.3%