Vendor
the wikimedia foundation
Public exploit15Avg CVSS5.8
CVEs in the catalog
98
since 2024-10
Months in the top 100
4
months with a stored rank
Best rank
#19
one month recomputed
Affected scope
Products and weakness classes
Products
| Product | CVEs | Share |
|---|---|---|
| mediawiki cargo extension | 11 | 11% |
| mediawiki wikilambda extension | 5 | 5% |
| mediawiki centralauth extension | 4 | 4% |
| mediawiki growthexperiments extension | 4 | 4% |
| mediawiki cargo | 3 | 3% |
| mediawiki cirrussearch extension | 2 | 2% |
| mediawiki css extension | 2 | 2% |
| mediawiki extensions css | 2 | 2% |
| mediawiki pagetriage extension | 2 | 2% |
| mediawiki wikibase extension | 2 | 2% |
| mediawiki wikilove extension | 2 | 2% |
| mediawiki advancedsearch extension | 1 | 1% |
Weakness classes
| Weakness | CVEs | Share |
|---|---|---|
| CWE-79 | 43 | 44% |
| CWE-20 | 9 | 9% |
| CWE-80 | 8 | 8% |
| CWE-116 | 5 | 5% |
| CWE-89 | 5 | 5% |
| CWE-200 | 4 | 4% |
| CWE-212 | 2 | 2% |
| CWE-22 | 2 | 2% |
Latest CVEs
15 most recently published
Enriched records open their full page; the rest open their catalog record.
| CVE | Weakness | Signals | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-103585 | CWE-80 | 1 | 1.2 | 2026-09-30 |
| CVE-2026-103584 | CWE-80 | 1 | 1.1 | 2026-09-30 |
| CVE-2026-103440 | CWE-202 | 1 | 1.2 | 2026-09-30 |
| CVE-2026-103439 | CWE-80 | none yet | 0.3 | 2026-09-30 |
| CVE-2026-103438 | CWE-80 | none yet | 0.3 | 2026-09-30 |
| CVE-2026-103437 | CWE-80 | 1 | 1.1 | 2026-09-30 |
| CVE-2026-103446 | CWE-639 | 1 | 7.4 | 2026-09-30 |
| CVE-2026-103445 | CWE-80 | 1 | 1.2 | 2026-09-30 |
| CVE-2026-103444 | CWE-80 | none yet | 1.1 | 2026-09-30 |
| CVE-2026-103443 | CWE-80 | none yet | 1.1 | 2026-09-30 |
| CVE-2026-103442 | CWE-15 | 1 | 7.2 | 2026-09-30 |
| CVE-2026-103441 | CWE-502 | 1 | 7.2 | 2026-09-30 |
| CVE-2026-103051 | CWE-79 | none yet | 6.1 | 2026-09-29 |
| CVE-2026-103050 | CWE-79 | none yet | 6.1 | 2026-09-29 |
| CVE-2026-103049 | CWE-79 | none yet | 6.1 | 2026-09-29 |