Wikimedia Foundation CheckUser

• CVE-2026-58034 None 0.0 Stored XSS through a system message when blocking a temporary account that's related to other temporary accounts 0.3%
• CVE-2026-34090 Medium 4.8 Suggested investigations: Handle suppressed usernames 0.3%
• CVE-2025-67478 None 0.0 Wrong E-Mail address composition for usernames with a comma and Umlauts in it like "Döe, Jähn" 0.3%
• CVE-2025-61658 Low 1.3 Special:GlobalContributions shows edits on wikis the viewer doesn't have access to 0.3%
• CVE-2025-61651 None 0.0 i18n XSS through Special:CheckUser CheckUser helper 0.2%
• CVE-2025-61648 None 0.0 Stored XSS through system messages in CheckUser 0.2%
• CVE-2025-61649 Low 1.1 UserInfoCard: Check that performing user has permission to view log entries for number of past blocks 0.4%
• CVE-2025-61650 Low 1.1 UserInfoCard is vulnerable to message key stored XSS 0.3%
• CVE-2025-61647 Low 0.3 UserInfoCard: Don't allow access to information about users who are suppressed if you don't have suppressor rights 0.3%