Sploitus

201 exploited vulnerabilities in Mediawiki

Showing 1–50 of 201, highest-scoring first

Vendors
Mediawiki, Unknown, Alt Linux, Red Os, Cargo, Wikimedia
With known exploits
201
Affected Mediawiki versions
< 1.43.9, 1.44.6, 1.45.4, 1.46.0, 1.40.0, 1.32.1, 1.39.6, 1.40.2, 1.41.1, 1.35.10, 1.38.6, 1.39.3, 1.37.1, 1.36, 1.23.15, 1.27.0, 1.27.1, 1.27.2, 1.28.0, 1.28.1, 1.23.11, 1.24.0, 1.24.1, 1.24.2, 1.24.3, 1.24.4, 1.25.0, 1.25.1, 1.25.2, 1.25.3, 1.26.0, 1.27.3, 1.28.2, 1.29.0, 1.29.1, 1.23.16, 1.31.15, 1.35.3, 1.36.1, 1.31.10, 1.34.4, 1.27.6, 1.30.2, 1.31.2, 1.32.2
Affected Mediawiki Cargo versions
= 3.6.0
Affected Centreon versions
< 20.04.14, 20.10.8, 21.04.2

Vulnerabilities with exploits

Highest CVSS first — 3 of these already have exploit code on Sploitus

CVE-2026-58025 1 exploit
CVSS 10.0 CRITICAL 2026-07-01FIX AVAILABLE
Exploit for Deserialization of Untrusted Data in Mediawiki
CVE-2025-12004
CVSS 10.0 CRITICAL 2025-10-21FIX AVAILABLE
CVE-2023-3550
CVSS 10.0 HIGH 2023-09-25FIX AVAILABLE
CVE-2019-12468
CVSS 10.0 CRITICAL 2019-06-07
CVE-2024-47849
CVSS 9.8 CRITICAL 2024-10-04FIX AVAILABLE
CVE-2024-34502
CVSS 9.8 CRITICAL 2024-02-09FIX AVAILABLE
CVE-2023-29141
CVSS 9.8 CRITICAL 2023-03-31FIX AVAILABLE
CVE-2022-28209
CVSS 9.8 CRITICAL 2022-03-30FIX AVAILABLE
CVE-2022-28206
CVSS 9.8 CRITICAL 2022-03-30FIX AVAILABLE
CVE-2022-28205
CVSS 9.8 CRITICAL 2022-03-30
CVE-2021-36128
CVSS 9.8 CRITICAL 2021-06-12
CVE-2021-36126
CVSS 9.8 CRITICAL 2021-06-12FIX AVAILABLE
CVE-2021-37558
CVSS 9.8 CRITICAL 2021-04-02FIX AVAILABLE
CVE-2017-0372 4 exploits
CVSS 9.8 CRITICAL 2017-08-22FIX AVAILABLE
MediaWiki SyntaxHighlight Extension Option InjectionSyntaxHighlight 2.0 MediaWiki 1.28.0 Stored Cross Site Scripting Vulnerability
CVE-2015-8626
CVSS 9.8 CRITICAL 2015-12-24FIX AVAILABLE
CVE-2017-8809
CVSS 9.8 CRITICAL 2017-11-15FIX AVAILABLE
CVE-2021-44855
CVSS 9.4 HIGH 2021-12-19FIX AVAILABLE
CVE-2025-53371
CVSS 9.1 CRITICAL 2025-07-10FIX AVAILABLE
CVE-2024-47846
CVSS 8.8 HIGH 2024-10-04FIX AVAILABLE
CVE-2021-36132
CVSS 8.8 HIGH 2021-06-12FIX AVAILABLE
CVE-2019-12466
CVSS 8.8 HIGH 2019-06-06FIX AVAILABLE
CVE-2017-0362
CVSS 8.8 HIGH 2017-04-16FIX AVAILABLE
CVE-2015-8624
CVSS 8.8 HIGH 2015-12-24FIX AVAILABLE
CVE-2015-8623
CVSS 8.8 HIGH 2015-12-24FIX AVAILABLE
CVE-2023-45363
CVSS 8.7 HIGH 2023-10-08FIX AVAILABLE
CVE-2025-53369
CVSS 8.6 HIGH 2025-07-03FIX AVAILABLE
CVE-2021-35197
CVSS 7.8 HIGH 2021-06-27FIX AVAILABLE
CVE-2020-25827
CVSS 7.8 HIGH 2020-09-25FIX AVAILABLE
CVE-2019-12474
CVSS 7.8 HIGH 2017-08-22FIX AVAILABLE
CVE-2017-0361
CVSS 7.8 HIGH 2017-04-16FIX AVAILABLE
CVE-2024-34506
CVSS 7.5 HIGH 2024-02-16FIX AVAILABLE
CVE-2022-34750
CVSS 7.5 HIGH 2022-06-28FIX AVAILABLE
CVE-2022-28323
CVSS 7.5 HIGH 2022-04-30FIX AVAILABLE
CVE-2022-28204
CVSS 7.5 HIGH 2022-04-18FIX AVAILABLE
CVE-2022-28203
CVSS 7.5 HIGH 2022-04-18FIX AVAILABLE
CVE-2017-0371
CVSS 7.5 HIGH 2017-08-22FIX AVAILABLE
CVE-2021-36125
CVSS 7.5 HIGH 2021-06-12
CVE-2019-12473
CVSS 7.5 HIGH 2019-06-07FIX AVAILABLE
CVE-2019-12472
CVSS 7.5 HIGH 2017-08-22FIX AVAILABLE
CVE-2017-8815
CVSS 7.5 HIGH 2017-11-15FIX AVAILABLE
CVE-2017-8814
CVSS 7.5 HIGH 2017-11-15FIX AVAILABLE
CVE-2017-8810
CVSS 7.5 HIGH 2017-11-15FIX AVAILABLE
CVE-2016-6335
CVSS 7.5 HIGH 2016-09-16FIX AVAILABLE
CVE-2016-6332
CVSS 7.5 HIGH 2016-09-16FIX AVAILABLE
CVE-2016-6331
CVSS 7.5 HIGH 2016-09-16FIX AVAILABLE
CVE-2015-8625
CVSS 7.5 HIGH 2015-12-24FIX AVAILABLE
CVE-2014-9277
CVSS 7.5 HIGH 2014-12-03FIX AVAILABLE
CVE-2013-6453
CVSS 7.5 HIGH 2014-02-07FIX AVAILABLE
CVE-2013-4571
CVSS 7.5 HIGH 2014-02-07FIX AVAILABLE
CVE-2004-1405 1 exploit
CVSS 7.5 HIGH 2004-12-31FIX AVAILABLE
MediaWiki 1.3.x - Arbitrary Script Upload