Piwigo
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 116 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from August 21, 2009 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Piwigo Public Authentication cross site scripting
Piwigo RCE via PHP Code Injection into Config File in Installer
Piwigo: SQL Injection in Activity.getList
Piwigo: SQL Injection in pwg.users.getList API Method via filter Parameter
Piwigo: Unauthenticated Information Disclosure via pwg.history.search API
Piwigo: Pre-auth SQL injection via date filter parameters in ws_std_image_sql_filter
Piwigo Vulnerable to User Enumeration via Password Reset Endpoint
Piwigo's secret key can be brute forced
Piwigo is vulnerable to one-click account takeover by modifying the password-reset link
Monitor Piwigo in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.