Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how matomo compares to other vendors in security performance

View Risk Score →

Matomo PiwikPiwik Authenticated RCE via Custom Plugin Upload

Risk 75
Severity
9.4
First published (updated )
CVE-2025-34104

Piwik PRO Piwik PROPiwik PRO - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-058

Risk 29
Severity
4.8
First published (updated )
CVE-2025-4415

Matomo Matomo AnalyticsMatomo Analytics - Moderately critical - Cross site request forgery - SA-CONTRIB-2025-008

Risk 38
Severity
6.8
EPSS
0.01%
First published (updated )
CVE-2025-31680

Matomo Matomo AnalyticsWordPress Matomo Analytics plugin <= 5.1.1 - Cross Site Request Forgery (CSRF) leading to Notice Dismissal vulnerability

Risk 20
Severity
4.3
First published (updated )
CVE-2024-38766

Matomo Analytics – Ethical Stats. Powerful Insights.Matomo <= 4.15.3 - Reflected Cross-Site Scripting via idsite

Risk 38
Severity
6.1
First published (updated )
CVE-2023-6923
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

composer/brotkrueml/typo3-matomo-integrationXSS

Risk 38
Severity
6.1
First published (updated )
CVE-2022-33156

Matomo Piwik Fpm-alpine Docker ImageThe official piwik Docker images before fpm-alpine (Alpine specific) contain a blank password for a …

Risk 87
Severity
10
First published (updated )
CVE-2020-29578

Matomo MatomoXSS

Risk 38
Severity
6.1
First published (updated )
CVE-2013-0195

Matomo MatomoXSS

Risk 38
Severity
6.1
First published (updated )
CVE-2013-0194

Matomo MatomoXSS

Risk 38
Severity
6.1
First published (updated )
CVE-2013-0193
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Matomo MatomoA full path disclosure vulnerability was discovered in Matomo v3.9.1 where a user can trigger a part…

Risk 22
Severity
4.3
First published (updated )
CVE-2019-12215

Matomo MatomoPath Traversal

Risk 52
Severity
7.5
First published (updated )
CVE-2015-7815

Matomo MatomoSSRF

Risk 52
Severity
7.5
First published (updated )
CVE-2015-7816

Matomo MatomoInput Validation

Risk 26
Severity
5
First published (updated )
CVE-2013-2633

Matomo MatomoXSS

Risk 22
Severity
4.3
First published (updated )
CVE-2013-1844
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Matomo MatomoXSS

Risk 22
Severity
4.3
First published (updated )
CVE-2012-4541

Matomo MatomoUnspecified vulnerability in Piwik 1.2 through 1.4 allows remote attackers with the view permission …

Risk 47
Severity
6.8
First published (updated )
CVE-2011-4941

Matomo MatomoInfoleak

Risk 26
Severity
5
First published (updated )
CVE-2011-3791

Matomo MatomoXSS

Risk 22
Severity
4.3
First published (updated )
CVE-2011-0004

Matomo MatomoPiwik before 1.1 does not prevent the rendering of the login form inside a frame in a third-party HT…

Risk 22
Severity
4.3
First published (updated )
CVE-2011-0399
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Matomo MatomoPiwik before 1.1 does not properly limit the number of files stored under tmp/sessions/, which might…

Risk 26
Severity
5
First published (updated )
CVE-2011-0401

Matomo MatomoThe Piwik_Common::getIP function in Piwik before 1.1 does not properly determine the client IP addre…

Risk 40
Severity
6.4
First published (updated )
CVE-2011-0398

Matomo MatomoCookie.php in Piwik before 1.1 does not set the secure flag for the session cookie in an https sessi…

Risk 26
Severity
5
First published (updated )
CVE-2011-0400

Matomo MatomoPath Traversal

Risk 47
Severity
6.8
First published (updated )
CVE-2010-2786

Matomo MatomoXSS

Risk 22
Severity
4.3
First published (updated )
CVE-2010-1453
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Matomo MatomoInput Validation

Risk 52
Severity
7.5
First published (updated )
CVE-2009-4137

Teethgrinder.co.uk Open Flash ChartUnrestricted file upload vulnerability in ofc_upload_image.php in Open Flash Chart v2 Beta 1 through…

Risk 52
Severity
7.5
First published (updated )
CVE-2009-4140

Matomo MatomoPiwik 0.2.32 and earlier stores sensitive information under the web root with insufficient access co…

Risk 26
Severity
5
First published (updated )
CVE-2009-1085

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203