Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2025-53625

DynamicPageList3 exposes hidden/suppressed usernames

Description

The DynamicPageList3 extension is a reporting tool for MediaWiki, listing category members and intersections with various formats and details. Several #dpl parameters can leak usernames that have been hidden using revision deletion, suppression, or the hideuser block flag. The vulnerability is fixed in 3.6.4.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Universal-Omega DynamicPageList3

  • < 3.6.4affected

References