Wikimedia Foundation Mediawiki - SocialProfile Extension
- CVE-2025-23074 Special:EditProfile exposes the contents of profile fields marked "hidden"/friends or "friends of friends" when the privileged user isn't a friend of the user whose profile they edit(ed) 0.4%