CVE-2026-126561

Name of the Vulnerable Software and Affected Versions Semantic MediaWiki versions 2.5.0 through 7.4.0

Description An authorization flaw allows editors lacking the edit-protection right to lock pages by adding an Is edit protected annotation. This is achieved by adding [[Is edit protected::true]] to pages or using #set within widely transcluded templates. Consequently, the TitleQuickPermissions() hook prevents other editors and administrators from editing, moving, or deleting the affected pages indefinitely.

Recommendations Update Semantic MediaWiki to version 7.4.1 or later.