High severityOSV Advisory· Published Jul 10, 2025· Updated Apr 15, 2026

CVE-2025-53625

Description

The DynamicPageList3 extension is a reporting tool for MediaWiki, listing category members and intersections with various formats and details. Several #dpl parameters can leak usernames that have been hidden using revision deletion, suppression, or the hideuser block flag. The vulnerability is fixed in 3.6.4.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
universal-omega/dynamic-page-list3Packagist	< 3.6.4	3.6.4

Affected products

Universal Omega/Dynamicpagelist4OSV
Range: 3.3.10, 3.3.5, 3.3.6, …
ghsa-coords
pkg:composer/universal-omega/dynamic-page-list3
Range: < 3.6.4

Patches

Vulnerability mechanics

References

github.com/advisories/GHSA-7pgw-q3qp-6pgqghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2025-53625ghsaADVISORY
github.com/Universal-Omega/DynamicPageList3/commit/a3dae0c89fb4214390c29ceffa23bbe2099986d6nvdWEB
github.com/Universal-Omega/DynamicPageList3/security/advisories/GHSA-7pgw-q3qp-6pgqnvdWEB

News mentions

No linked articles in our index yet.

cvss	0.455
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000