CVE-2025-6589 – With MultiBlocks enabled and a user who is suppressed via a MultiBlock, a user without ‘hideuser’ can see the hidden username in the BlockList

CVE ID : CVE-2025-6589

Published : Feb. 2, 2026, 11:03 p.m. | 13 minutes ago

Description : Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/specials/pagers/BlockListPager.Php.

This issue affects MediaWiki: >= 1.42.0.

Severity: 2.1 | LOW

Visit the link for more details, such as CVSS details, affected products, timeline, and more…