Vendor
wikimedia foundation
Public exploit2Avg CVSS3.2
CVEs in the catalog
136
since 2019-12
Months in the top 100
7
months with a stored rank
Best rank
#9
one month recomputed
Affected scope
Products and weakness classes
Products
| Product | CVEs | Share |
|---|---|---|
| mediawiki | 55 | 40% |
| checkuser | 9 | 7% |
| mediawiki cargo extension | 4 | 3% |
| abusefilter | 3 | 2% |
| mediawiki abusefilter extension | 3 | 2% |
| mediawiki checkuser extension | 3 | 2% |
| mediawiki securepoll extension | 3 | 2% |
| mediawiki campaignevents extension | 2 | 1% |
| mediawiki ipinfo extension | 2 | 1% |
| mediawiki mintydocs extension | 2 | 1% |
| mediawiki proofreadpage extension | 2 | 1% |
| oathauth | 2 | 1% |
Weakness classes
| Weakness | CVEs | Share |
|---|---|---|
| CWE-79 | 64 | 47% |
| CWE-200 | 19 | 14% |
| CWE-22 | 11 | 8% |
| CWE-20 | 6 | 4% |
| CWE-862 | 5 | 4% |
| CWE-80 | 3 | 2% |
| CWE-281 | 2 | 1% |
| CWE-284 | 2 | 1% |
Latest CVEs
15 most recently published
Enriched records open their full page; the rest open their catalog record.
| CVE | Weakness | Signals | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-58025 | CWE-502, CWE-94 | 1 | 5.9 | 2026-07-01 |
| CVE-2026-58029 | CWE-287 | none yet | 5.3 | 2026-07-01 |
| CVE-2026-58028 | CWE-79 | none yet | n/a | 2026-07-01 |
| CVE-2026-58026 | CWE-200 | none yet | n/a | 2026-07-01 |
| CVE-2026-8857 | CWE-94 | none yet | n/a | 2026-07-01 |
| CVE-2026-58038 | CWE-79 | none yet | n/a | 2026-07-01 |
| CVE-2026-58027 | CWE-200 | none yet | 5.3 | 2026-07-01 |
| CVE-2026-58030 | CWE-79 | none yet | 5.3 | 2026-07-01 |
| CVE-2026-58032 | CWE-79 | none yet | 5.3 | 2026-07-01 |
| CVE-2026-58033 | CWE-200 | none yet | 5.3 | 2026-07-01 |
| CVE-2026-58037 | CWE-79 | none yet | n/a | 2026-07-01 |
| CVE-2026-58036 | CWE-200 | none yet | 2.1 | 2026-07-01 |
| CVE-2026-58024 | CWE-200 | none yet | 5.1 | 2026-07-01 |
| CVE-2026-13707 | CWE-384 | none yet | n/a | 2026-07-01 |
| CVE-2026-13706 | CWE-20 | none yet | n/a | 2026-07-01 |