The Wikimedia Foundation AbuseFilter vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting The Wikimedia Foundation AbuseFilter: 3 record(s), with affected versions and fixes.

CVE-2026-58027 Medium · 6.5 CWE-200 Jul 1, 2026

QueryAbuseFilter API can be used to see the hit count of private filters, which is hidden in the UI

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation AbuseFilter. This vulnerability is associated with program files includes/Api/QueryAbuseFilters.Php. This issue affects AbuseFilter: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9.

CVE-2026-34086 Low · 2.1 CWE-20 May 11, 2026

AbuseFilter misuses ::userCanBitfield, exposing access-controlled information

Vulnerability in Wikimedia Foundation AbuseFilter. This issue affects AbuseFilter: from * before 1.43.7, 1.44.4, 1.45.2.

CVE-2025-6592 Low · 2.1 CWE-284 Feb 2, 2026

Creating a permanent account from a temporary account associates temp username and IP address with real username in AbuseLog

Vulnerability in Wikimedia Foundation AbuseFilter. This vulnerability is associated with program files includes/auth/AuthManager.Php. This issue affects AbuseFilter: from fe0b1cb9e9691faf4d8d9bd80646589f6ec37615 before 1.43.2, 1.44.0.