CVE-2025-61658

MEDIUM 4.3CVE-2025-61658 · Published 03/02/2026 · updated 17/06/2026

In short

CVE-2025-61658 is a MEDIUM (CVSS 4.3) vulnerability affecting checkuser (mediawiki).
Chance of exploitation in the next 30 days (EPSS): 0.28%, higher than 20.2% of all vulnerabilities.
Fix: update to 1.43.4 or later.

Package	Affected versions	Patched versions
checkuser mediawiki	`= 1.44.0≥ 1.43.0, < 1.43.4`	`1.43.4`

Description

Vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with program files src/GlobalContributions/GlobalContributionsPager.Php. This issue affects CheckUser: from * before 1.43.4, 1.44.1.

References

phabricator.wikimedia.org/T404805 · Permissions Required

More vulnerabilities in checkuser

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

checkuser

mediawiki

= 1.44.0≥ 1.43.0, < 1.43.4

1.43.4

More vulnerabilities in checkuser

See all →