What’s Vulnerable › Products

Wikimedia Foundation AbuseFilter vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your Wikimedia Foundation AbuseFilter version is affected

Latest Wikimedia Foundation AbuseFilter vulnerabilities

• CVE-2026-34086 — AbuseFilter misuses ::userCanBitfield, exposing access-controlled information (CVSS 2.1)
• CVE-2025-6592 — Creating a permanent account from a temporary account associates temp username and IP address with real username in AbuseLog (CVSS 2.1)
• CVE-2019-16528 — (CVSS 7.5)
• CVE-2019-18987 — (CVSS 5.3)
• CVE-2019-18612 — (CVSS 5.3)