CVE Daily – Matomo (High+Critical) https://cvedaily.com/pages/tags/matomo.html CVE Daily – Matomo (High+Critical) en Wed, 03 Jun 2026 21:27:05 +0000 [Critical] CVE-2025-34104 – An authenticated remote code execution vulnerability exists in Piwik (now Matomo... https://nvd.nist.gov/vuln/detail/CVE-2025-34104 https://nvd.nist.gov/vuln/detail/CVE-2025-34104 Tue, 15 Jul 2025 13:15:29 +0000 Critical CVE-2025-34104

An authenticated remote code execution vulnerability exists in Piwik (now Matomo) versions prior to 3.0.3 via the plugin upload mechanism. In vulnerable versions, an authenticated user with Superuser privileges can upload and activate a malicious plugin (ZIP archive), leading to arbitrary PHP code execution on the underlying system. Starting with version 3.0.3, plugin upload functionality is disa…

CVSS: 9.4 · CWE: CWE-306

View on NVD

]]>