CVE-2026-102796: Wikimedia Foundation Mediawiki - Userpageviewtracker Extension

High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Wikimedia Foundation Mediawiki - UserPageViewTracker Extension allows SQL Injection. This issue affects Mediawiki - UserPageViewTracker Extension: from * before 1.46.1, 1.45.5, 1.43.10.

Affected products

• Wikimedia Foundation Mediawiki - Userpageviewtracker Extension

Published 2026-09-29. Last modified 2026-10-01.