CVE-2011-1580: Mediawiki

Low severity, CVSS 3.5. EPSS: 2% chance of exploitation in the next 30 days.

The transwiki import functionality in MediaWiki before 1.16.3 does not properly check privileges, which allows remote authenticated users to perform imports from any wgImportSources wiki via a crafted POST request.

Affected products

• Mediawiki Mediawiki: up to and including 1.16.2; version 1.1.0 only; version 1.2.0 only; version 1.2.1 only; version 1.2.2 only; version 1.2.3 only; …

Published 2011-04-27. Last modified 2026-06-16.