Skip to content
OpenAdvisories

Product · Piwik (now Matomo)

Web Analytics Platform

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.4
    CVE-2025-34104 Public exploit

    Piwik Authenticated RCE via Custom Plugin Upload

    An authenticated remote code execution vulnerability exists in Piwik (now Matomo) versions prior to 3.0.3 via the plugin upload mechanism. In vulnerable versions, an authenticated user with Superuser privileges can upload and activate a malicious plugin (ZIP …

    Piwik (now Matomo) Web Analytics Platform