MediaWiki SecurePoll Extension Vulnerability Exposes Election Admin Privileges
CVE-2025-53485
Currently unrated
What is CVE-2025-53485?
The MediaWiki SecurePoll extension features a significant vulnerability within its SetTranslationHandler.php component. This flaw permits unauthorized users, including those who are unauthenticated, to modify election-related translation text due to a lack of validation for election admin status. Although updates in newer MediaWiki versions have addressed some aspects of this issue, critical checks are still absent, leaving the system vulnerable to potential manipulation. This can lead to unauthorized changes affecting the integrity of election processes.
Affected Version(s)
Mediawiki - SecurePoll extension 1.39.x < 1.39.13
Mediawiki - SecurePoll extension 1.42.x < 1.42.7
Mediawiki - SecurePoll extension 1.43.x < 1.43.2