GCVE - cpe:2.3:a:mediawiki:mediawiki:1.44.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:mediawiki:mediawiki:1.44.0:*:*:*:*:*:*:*

part: a version: 1.44.0 update: *

Vendor	Mediawiki (`cdb1ca1d-4622-5407-a7d8-3e891579b8c5`)
Product	Mediawiki (`ab97168e-95e7-5d6e-a2ac-f8d27117dc4d`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/wikimedia/mediawiki`	purl2cpe	2026-06-01 10:10:57.667204
`pkg:wikimedia/mediawiki`	purl2cpe	2026-06-01 10:10:57.667205

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-0669`	not_vulnerable	2026-06-03 15:14:42.522423	Path Traversal vulnerability in CSS extension on certain web servers Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Wikimedia Foundation MediaWiki - CSS extension allows Path Traversal.This issue affects MediaWiki - CSS extension: 1.44, 1.43, 1.39. Published: 2026-01-07T17:46:57.285Z Updated: 2026-01-07T19:21:57.287Z Open on db.gcve.eu Reference links https://phabricator.wikimedia.org/T401526 https://gerrit.wikimedia.org/r/q/Ia15bf3f2e5a341868568492a736ac3dbf706c22e	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-61646`	vulnerable	2026-06-03 15:07:56.952511	Watchlist group mode reveals authors of edits with hidden authorship Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/RecentChanges/EnhancedChangesList.Php. This issue affects MediaWiki: from * before 1.39.14, 1.43.4, 1.44.1. Published: 2026-02-03T00:11:28.576Z Updated: 2026-03-03T15:42:05.107Z Open on db.gcve.eu Reference links https://phabricator.wikimedia.org/T398706	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-61643`	vulnerable	2026-06-03 15:07:56.951489	EventStreams publishes suppressed recent change entries that are suppressed from their creation Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/recentchanges/RecentChangeRCFeedNotifier.Php. This issue affects MediaWiki: from * before 1.39.14, 1.43.4, 1.44.1. Published: 2026-02-02T23:33:50.429Z Updated: 2026-02-03T21:15:48.802Z Open on db.gcve.eu Reference links https://phabricator.wikimedia.org/T403757	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-61642`	vulnerable	2026-06-03 15:07:56.950919	Stored XSS through system messages provided to CodexHtmlForms Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/htmlform/CodexHTMLForm.Php, includes/htmlform/fields/HTMLButtonField.Php. This issue affects MediaWiki: from * before 1.39.14, 1.43.4, 1.44.1. Published: 2026-02-02T23:36:42.550Z Updated: 2026-02-03T21:16:42.867Z Open on db.gcve.eu Reference links https://phabricator.wikimedia.org/T402313	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-61641`	vulnerable	2026-06-03 15:07:56.950327	API list=allpages with maxsize is making really slow queries Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/api/ApiQueryAllPages.Php. This issue affects MediaWiki: from * before 1.39.14, 1.43.4, 1.44.1. Published: 2026-02-02T23:39:38.847Z Updated: 2026-03-03T15:43:22.749Z Open on db.gcve.eu Reference links https://phabricator.wikimedia.org/T298690	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.