Skip to content
OpenAdvisories

Vendor

matomoteam

3 known vulnerabilities.

Products

Matomo Analytics 1 Connect Matomo – Analytics Dashboard for WordPress 1 Matomo Analytics – Powerful, Privacy-First Insights for WordPress 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.3
    CVE-2024-38766

    WordPress Matomo Analytics plugin <= 5.1.1 - Cross Site Request Forgery (CSRF) leading to Notice Dismissal vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in matomoteam Matomo Analytics matomo allows Cross Site Request Forgery.This issue affects Matomo Analytics: from n/a through <= 5.1.1.

    matomoteam Matomo Analytics
  • Medium 6.1
    CVE-2023-6923

    Matomo <= 4.15.3 - Reflected Cross-Site Scripting via idsite

    The Matomo Analytics – Ethical Stats. Powerful Insights. plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the idsite parameter in all versions up to, and including, 4.15.3 due to insufficient input sanitization and output escaping. Thi…

    matomoteam Matomo Analytics – Powerful, Privacy-First Insights for WordPress Web / CMS
  • Medium 6.4
    CVE-2023-4774

    WP-Matomo Integration (WP-Piwik) <= 1.0.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    The WP-Matomo Integration (WP-Piwik) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wp-piwik' shortcode in versions up to, and including, 1.0.28 due to insufficient input sanitization and output escaping on user supplied attributes…

    matomoteam Connect Matomo – Analytics Dashboard for WordPress Web / CMS