miraheze Latest Vulnerabilities
Latest vulnerabilities published by miraheze
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Remote Code Execution and Denial of Service Vulnerabilities in MediaWiki Extension by Miraheze
CVE-2025-53371MirahezeDiscordnotifications9.1CRITICALReflected and Stored XSS Vulnerability in ManageWiki by MediaWiki
CVE-2025-43861MirahezeManagewiki4.4MEDIUMMediaWiki Extension Vulnerability Affecting ManageWiki by Miraheze
CVE-2025-32964MirahezeManagewiki4.6MEDIUMSQL Injection Vulnerability in ManageWiki MediaWiki Extension
CVE-2025-32956MirahezeManagewiki8HIGHVulnerability in ImportDump MediaWiki Extension Allows User Impersonation
CVE-2024-47816MirahezeImportDumpArbitrary HTML injection vulnerability in Special:RequestWikiQueue
CVE-2024-47781MirahezeCreatewiki6.1MEDIUMXSS Vulnerability in WikiDiscover Could Allow Attackers to Execute Malicious Code
CVE-2024-47782MirahezeWikidiscover5.4MEDIUMCross-Site Scripting Vulnerability in DataDump MediaWiki Extension
CVE-2024-47612MirahezeDataDumpCreateWiki vulnerable to impersonation of wiki requester
CVE-2024-34701MirahezeCreatewiki5.9MEDIUMSuppressed Wiki Requests May Have Been Exposed to Private Wikis Due to Oversight
CVE-2024-29898MirahezeCreatewiki4.9MEDIUMSuppressed Wiki Requests Vulnerability in Miraheze's MediaWiki Extension
CVE-2024-29897MirahezeCreatewiki4.9MEDIUMSuppression of wiki requests not working as intended, exposing sensitive information
CVE-2024-29883MirahezeCreatewiki4.9MEDIUMCross Site Scripting Vulnerability in ManageWiki
CVE-2024-25109mirahezeManageWiki5.4MEDIUMXSS Vulnerability in WikiDiscover Due to Unescaped Interface Messages
CVE-2024-25107MirahezeWikidiscover4.9MEDIUMAuthentication Bypass Using an Alternate Path or Channel in CreateWiki
CVE-2022-24813MirahezeCreatewiki5.3MEDIUMImproper Input Validation in GlobalNewFiles
CVE-2021-39186MirahezeGlobalnewfiles4.3MEDIUMCross-Site Request Forgery (CSRF) in DataDump
CVE-2021-32774MirahezeDatadump6.1MEDIUMUncontrolled Resource Consumption in GlobalNewFiles
CVE-2021-32722MirahezeGlobalnewfiles6.5MEDIUMwikiconfig API leaked private config variables set through ManageWiki
CVE-2021-29483MirahezeManagewiki9.4CRITICAL