Skip to content
OpenAdvisories

Vendor

Piwik (now Matomo)

1 known vulnerabilities.

Products

Web Analytics Platform 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.4
    CVE-2025-34104 Public exploit

    Piwik Authenticated RCE via Custom Plugin Upload

    An authenticated remote code execution vulnerability exists in Piwik (now Matomo) versions prior to 3.0.3 via the plugin upload mechanism. In vulnerable versions, an authenticated user with Superuser privileges can upload and activate a malicious plugin (ZIP …

    Piwik (now Matomo) Web Analytics Platform