Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

Wiki

MediaWiki

MediaWiki is a free software wiki package written in PHP originally for use on Wikipedia. It is now used by several other projects of the non-profit Wikimedia Foundation and by many other wikis. MediaWiki is designed to be run on a large server farm for a website that gets millions of hits per day.

Official Site:

https://www.mediawiki.org/wiki/MediaWiki

Severity Summary:

Critical: 20 High: 66 Medium: 286 Low: 13
Reference
Title
Severity
CVE-2014-9487
MediaWiki Improper Restriction of XML External Entity Reference Vulnerability
Critical
CVE-2022-28206
MediaWiki Vulnerability
Critical
CVE-2021-31556
MediaWiki Use of a Broken or Risky Cryptographic Algorithm Vulnerability
Critical
CVE-2017-8809
MediaWiki Improper Neutralization of Special Elements in Output Used by a Downstream Component (Injection) Vulnerability
Critical
CVE-2023-29141
MediaWiki Vulnerability
Critical
CVE-2023-3550
MediaWiki Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Critical
CVE-2024-34502
MediaWiki Cross-Site Request Forgery (CSRF) Vulnerability
Critical
CVE-2017-0372
MediaWiki Improper Neutralization of Special Elements in Output Used by a Downstream Component (Injection) Vulnerability
Critical
CVE-2022-28209
MediaWiki Vulnerability
Critical
CVE-2023-37303
MediaWiki Vulnerability
Critical
CVE-2020-10534
MediaWiki Improper Privilege Management Vulnerability
Critical
CVE-2022-28205
MediaWiki Vulnerability
Critical
CVE-2015-8626
MediaWiki Credentials Management Errors Vulnerability
Critical
CVE-2022-29906
MediaWiki Incorrect Authorization Vulnerability
Critical
CVE-2021-36126
MediaWiki Other Vulnerability
Critical
CVE-2025-67484
MediaWiki Improper Input Validation Vulnerability
Critical
CVE-2022-29904
MediaWiki Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability
Critical
CVE-2021-36128
MediaWiki Improper Authentication Vulnerability
Critical
CVE-2015-8009
MediaWiki Credentials Management Errors Vulnerability
Critical
CVE-2019-12468
MediaWiki Missing Authentication for Critical Function Vulnerability
Critical
CVE-2012-0046
MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
High
CVE-2015-8008
MediaWiki Improper Access Control Vulnerability
High
CVE-2013-1816
MediaWiki Improper Input Validation Vulnerability
High
CVE-2013-1817
MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
High
CVE-2023-45371
MediaWiki Allocation of Resources Without Limits or Throttling Vulnerability
High
CVE-2020-26121
MediaWiki Incorrect Authorization Vulnerability
High
CVE-2021-42040
MediaWiki Loop with Unreachable Exit Condition (Infinite Loop) Vulnerability
High
CVE-2021-35197
MediaWiki Exposure of Resource to Wrong Sphere Vulnerability
High
CVE-2012-4381
MediaWiki Use of Hard-coded Credentials Vulnerability
High
CVE-2020-29005
MediaWiki Insufficiently Protected Credentials Vulnerability
High