Wikimedia Foundation AbuseFilter vulnerabilities
3 published CVEs name Wikimedia Foundation AbuseFilter among the affected products.
- 3Published CVEs3 of them scored
- 3Last 12 monthspublished in the last year
- 0Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-58027
QueryAbuseFilter API can be used to see the hit count of private filters, which is hidden in the UI
Wikimedia Foundation · AbuseFilter
Medium5.3 - CVE-2026-34086
AbuseFilter misuses ::userCanBitfield, exposing access-controlled information
Wikimedia Foundation · AbuseFilter
Low2.1 - CVE-2025-6592
Creating a permanent account from a temporary account associates temp username and IP address with real username in AbuseLog
Wikimedia Foundation · AbuseFilter
Low2.1