The Wikimedia Foundation MediaWiki WatchAnalytics extension vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting The Wikimedia Foundation MediaWiki WatchAnalytics extension: 1 record(s), with affected versions and fixes.
CVE-2025-62658
High · 7.5
CWE-89 Oct 20, 2025
SQL injection in WatchAnalytics through Special:ClearPendingReviews
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in The Wikimedia Foundation MediaWiki WatchAnalytics extension allows SQL Injection.This issue affects MediaWiki WatchAnalytics extension: 1.43, 1.44.