What’s Vulnerable › Products

Wikimedia Foundation Mediawiki - SocialProfile Extension vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your Wikimedia Foundation Mediawiki - SocialProfile Extension version is affected

Latest Wikimedia Foundation Mediawiki - SocialProfile Extension vulnerabilities

• CVE-2025-23074 — Special:EditProfile exposes the contents of profile fields marked "hidden"/friends or "friends of friends" when the privileged user isn't a friend of the user whose profile they edit(ed) (CVSS 2.4)