CVE Intelligence

Dokuwiki vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Dokuwiki products: 2 record(s), with severity, exploitation and fixes.

Dokuwiki 2

Exploited only (KEV) →

CVE-2026-26477 Medium · 4.3 CWE-770 Apr 3, 2026
Allocation of Resources Without Limits or Throttling in Dokuwiki
An issue in Dokuwiki v.2025-05-14b "Librarian" [56.2] allows a remote attacker to cause a denial of service via the media_upload_xhr() function in the media.php file
CVE-2019-25338 Medium · 5.3 CWE-204 Feb 12, 2026
Dokuwiki 2018-04-22b - Username Enumeration
DokuWiki 2018-04-22b contains a username enumeration vulnerability in its password reset functionality that allows attackers to identify valid user accounts. Attackers can submit different usernames to the password reset endpoint and distinguish between existing and non-existing accounts by analyzing the server's error response messages.