Vendor
wikimedia foundation
Public exploit5Avg CVSS3.6
CVEs in the catalog
152
since 2019-12
Months in the top 100
8
months with a stored rank
Best rank
#9
one month recomputed
Affected scope
Products and weakness classes
Products
| Product | CVEs | Share |
|---|---|---|
| mediawiki | 55 | 36% |
| checkuser | 9 | 6% |
| mediawiki cargo extension | 4 | 3% |
| abusefilter | 3 | 2% |
| mediawiki abusefilter extension | 3 | 2% |
| mediawiki checkuser extension | 3 | 2% |
| mediawiki securepoll extension | 3 | 2% |
| mediawiki campaignevents extension | 2 | 1% |
| mediawiki centralauth extension | 2 | 1% |
| mediawiki datatransfer extension | 2 | 1% |
| mediawiki ipinfo extension | 2 | 1% |
| mediawiki mintydocs extension | 2 | 1% |
Weakness classes
| Weakness | CVEs | Share |
|---|---|---|
| CWE-79 | 71 | 47% |
| CWE-200 | 23 | 15% |
| CWE-22 | 11 | 7% |
| CWE-862 | 7 | 5% |
| CWE-20 | 6 | 4% |
| CWE-80 | 3 | 2% |
| CWE-281 | 2 | 1% |
| CWE-284 | 2 | 1% |
Latest CVEs
15 most recently published
Enriched records open their full page; the rest open their catalog record.
| CVE | Weakness | Signals | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-102796 | CWE-89 | none yet | 7.5 | 2026-09-29 |
| CVE-2026-100245 | CWE-79 | none yet | 6.1 | 2026-09-29 |
| CVE-2026-100244 | CWE-200 | none yet | 7.5 | 2026-09-29 |
| CVE-2026-100243 | CWE-79 | none yet | 6.1 | 2026-09-29 |
| CVE-2026-100242 | CWE-1395, CWE-400 | none yet | 7.5 | 2026-09-29 |
| CVE-2026-100241 | CWE-200 | none yet | 7.5 | 2026-09-29 |
| CVE-2026-100240 | CWE-862 | none yet | 9.1 | 2026-09-29 |
| CVE-2026-100238 | CWE-79 | none yet | 6.1 | 2026-09-29 |
| CVE-2026-100383 | CWE-79 | none yet | 4.8 | 2026-09-25 |
| CVE-2026-100382 | CWE-78 | 1 | 10 | 2026-09-25 |
| CVE-2026-100381 | CWE-79 | 1 | 5.3 | 2026-09-25 |
| CVE-2026-100380 | CWE-79 | 1 | 5.3 | 2026-09-25 |
| CVE-2026-100379 | CWE-200 | none yet | 5.3 | 2026-09-25 |
| CVE-2026-100378 | CWE-862 | none yet | 5.3 | 2026-09-25 |
| CVE-2026-100376 | CWE-79 | none yet | 4.8 | 2026-09-25 |