Path Traversal in Wikimedia Foundation Thanks

CVE-2025-61654

Vulnerability in Wikimedia Foundation Thanks. This vulnerability is associated with program files includes/ThanksQueryHelper.Php. This issue affects Thanks: from * before 1.43.4, 1.44.1.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.003 (22.7th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References