Approved changes feed: RSS · Atom
cpe:2.3:a:wikimedia_foundation:checkuser:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Wikimedia Foundation (f7943c01-50f6-53ec-b645-b355c8f75e02) |
|---|---|
| Product | Checkuser (9d06f1fd-ae11-5fe6-8d90-0b15448d62be) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-58034 |
vulnerable | 2026-07-29 01:03:16.591810 |
Stored XSS through a system message when blocking a temporary account that's related to other temporary accounts
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation CheckUser.
This vulnerability is associated with program files modules/ext.CheckUser.TempAccounts/components/blockConnectedTempAccountsField.Vue.
This issue affects CheckUser: from 1.46.0-rc.0 before 1.46.0.
Published: 2026-07-01T14:21:04.398Z
Updated: 2026-07-01T14:46:05.002Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-34090 |
vulnerable | 2026-06-08 07:59:11.802161 |
Suggested investigations: Handle suppressed usernames
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation CheckUser.
This issue affects CheckUser: from 1.45.0 before 1.45.2.
Published: 2026-05-11T14:50:50.318Z
Updated: 2026-05-11T15:51:32.487Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-67478 |
vulnerable | 2026-06-08 07:41:19.867139 |
Wrong E-Mail address composition for usernames with a comma and Umlauts in it like "Döe, Jähn"
Vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with program files includes/Mail/UserMailer.Php.
This issue affects CheckUser: from * before 1.39.14, 1.43.4, 1.44.1.
Published: 2026-02-03T01:14:17.814Z
Updated: 2026-03-02T17:43:34.432Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-61658 |
vulnerable | 2026-06-08 07:37:27.889549 |
Special:GlobalContributions shows edits on wikis the viewer doesn't have access to
Vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with program files src/GlobalContributions/GlobalContributionsPager.Php.
This issue affects CheckUser: from * before 1.43.4, 1.44.1.
Published: 2026-02-03T00:59:30.322Z
Updated: 2026-03-03T15:45:22.658Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-61651 |
vulnerable | 2026-06-08 07:37:27.879632 |
i18n XSS through Special:CheckUser CheckUser helper
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with program files modules/ext.CheckUser/checkuser/checkUserHelper/buildUserElement.Js.
This issue affects CheckUser: from * before 1.44.1.
Published: 2026-02-03T00:53:14.630Z
Updated: 2026-02-03T21:08:33.097Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-61650 |
vulnerable | 2026-06-08 07:37:27.879328 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-61649 |
vulnerable | 2026-06-08 07:37:27.878928 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-61648 |
vulnerable | 2026-06-08 07:37:27.877220 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-61647 |
vulnerable | 2026-06-08 07:37:27.876720 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.