← All credits

mjbommar

3 vulnerability records and advisories credit this contributor.

CVE-2026-102796

Unauthenticated SQL injection in UserPageViewTracker via filterusers and ignoreusers parameters

CVE-2026-100244

CentralAuth exposes locally suppressed block information via globaluserinfo API and Special:CentralAuth (incomplete fix for CVE-2025-62669)

CVE-2026-100245

Stored XSS on Wikibase Special:SetSiteLink via unescaped system message