matomo
Security Risk Profile
50
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 28 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from March 25, 2009 to present
28
Total CVEs
6
Critical+High
0
Exploited
6
Unpatched
Threat Assessment
Avg CVSS
6
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
6
Critical/High
Risk Level
50/100
medium
Severity Distribution
Critical
2High
4Medium
22Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
1Age Distribution
Common Weaknesses (CWE)
1
XSS
10
2
CSRF
2
3
Path Traversal
2
4
Input Validation
2
5
Malicious File Upload
1
Most Affected Products
1. Matomo Matomo476
2. Teethgrinder.co.uk Open Flash Chart8
3. Matomo Piwik Fpm-alpine Docker Image5
4. debian/matomo3
5. composer/piwik/piwik3
Recent Vulnerabilities
See more →CVE-2025-34104
CVSS 9.4critical
Piwik Authenticated RCE via Custom Plugin Upload
7/15/2025🔧 No Patch
CVE-2025-4415
CVSS 4.8medium
Piwik PRO - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-058
5/21/2025🔧 No Patch
CVE-2025-31680
CVSS 6.8EPSS 0%medium
Matomo Analytics - Moderately critical - Cross site request forgery - SA-CONTRIB-2025-008
3/31/2025
CVE-2024-38766
CVSS 4.3medium
WordPress Matomo Analytics plugin <= 5.1.1 - Cross Site Request Forgery (CSRF) leading to Notice Dismissal vulnerability
1/2/2025
CVE-2023-6923
CVSS 6.1medium
Matomo <= 4.15.3 - Reflected Cross-Site Scripting via idsite
2/20/2024
CVE-2022-33156
CVSS 6.1medium
6/13/2022
CVE-2020-29578
CVSS 10.0critical
12/8/2020🔧 No Patch
CVE-2013-0195
CVSS 6.1medium
11/20/2019
CVE-2013-0194
CVSS 6.1medium
11/20/2019
CVE-2013-0193
CVSS 6.1medium
11/20/2019
Monitor matomo in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.