CVE-2025-61641

API list=allpages with maxsize is making really slow queries

Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/api/ApiQueryAllPages.Php. This issue affects MediaWiki: from * before 1.39.14, 1.43.4, 1.44.1.

We have discovered 9,072 live websites that are affected by CVE-2025-61641.

Run a Free Instant Scan



Affected Software

Product  MediaWiki
Category Wikis
Vulnerable Domains9,072 live websites (58% of MediaWiki install base)
Vulnerable Versions
  • from 0 through 1.39.14
  • from 1.43.4 through 1.43.4
  • from 1.44.1 through 1.44.1
Vulnerable Versions Count193 versions ( 86% of all versions)



Details

  • Published - Feb 2, 2026
  • Updated - Feb 3, 2026

Website Distribution by Country

Number of websites using CVE-2025-61641
United States3,212 websites


Germany1,907 websites
France577 websites
Russia570 websites
Netherlands255 websites
GB240 websites
Singapore186 websites
Canada122 websites
Italy121 websites

Website Distribution by TLD

Number of websites using CVE-2025-61641
.com2,259 websites
.org2,049 websites
.de907 websites
.net754 websites
.ru441 websites
.info210 websites
.fr165 websites
.nl145 websites
.eu138 websites
.edu87 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2025-61641

Top websites that are affected by CVE-2025-61641. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
************.org Singapore***
****************.de Germany***
*******.com United States*,***
****.*******.org United States*,***
****.******.org United States*,***
*******.com Singapore*,***
****.******.com United States*,***
****.********.org United States*,***
*******.com United States*,***
****.***************.org United States**,***
See full domain list

FAQ

A total of 9,072 websites have been identified as vulnerable to CVE-2025-61641, based on global website indexing conducted by WebTechSurvey.
The MediaWiki is affected by the CVE-2025-61641 vulnerability.
MediaWiki versions up to and including 1.44.1 are vulnerable to CVE-2025-61641.