CVE-2025-12004 – The compare API module breaks Extension:Lockdown

CVE ID : CVE-2025-12004

Published : Oct. 21, 2025, 6:20 a.m. | 22 minutes ago

Description : Incorrect Permission Assignment for Critical Resource vulnerability in The Wikimedia Foundation Mediawiki – Lockdown Extension allows Privilege Abuse. Fixed in Mediawiki Core Action APIThis issue affects Mediawiki – Lockdown Extension: from master before 1.42.

Severity: 10.0 | CRITICAL

Visit the link for more details, such as CVSS details, affected products, timeline, and more…