Web Analytics Platform vulnerabilities

1 known vulnerability in Web Analytics Platform from Piwik (now Matomo). 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.4 Critical severity

  Web Analytics Platform: Missing Authentication for Critical Functionality

  CVE-2025-34104Jul 15, 2025Piwik (now Matomo)EPSS 1.91%

  An authenticated remote code execution vulnerability exists in Piwik (now Matomo) versions prior to 3.0.3 via the plugin upload mechanism. In vulnerable versions, an authenticated user with Superuser privileges can upload and activate a malicious plugin (ZIP a