What’s Vulnerable › Products
The Wikimedia Foundation Mediawiki - GrowthExperiments Extension vulnerabilities
4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.
Latest The Wikimedia Foundation Mediawiki - GrowthExperiments Extension vulnerabilities
- CVE-2026-39934 — Growth Experiments ReassignMenteesJob runs as an infinite loop (CVSS 6.9)
- CVE-2026-22713 — Stored XSS through edit summaries in GrowthExperiments (CVSS 5.4)
- CVE-2025-62668 — Insufficient permission checks in action=growthsetmentor (CVSS 6.9)
- CVE-2025-62667 — Stored XSS through article extracts in GrowthExperiments (CVSS 6.9)