By year
09
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
Bars are flaws published each year; the red part is the share attackers have used.
Latest high and critical flaws
- CVE-2026-62262 Piwigo is a full featured open source photo gallery application for the web.Critical 9.1 · Sep 25, 2026
- CVE-2026-44642 Piwigo is a full featured open source photo gallery application for the web.High 8.1 · Sep 25, 2026
- CVE-2026-42324 Piwigo is a full featured open source photo gallery application for the web.High 7.2 · Sep 25, 2026
- CVE-2026-42323 Piwigo is a full featured open source photo gallery application for the web.High 7.2 · Sep 25, 2026
- CVE-2026-42322 Piwigo is a full featured open source photo gallery application for the web.Critical 9.1 · Sep 25, 2026
- CVE-2026-85750 Piwigo before v16.4.0 is vulnerable to arbitrary file read and remote code execution in image upload handling when using the Imagick library due to insufficientHigh 7.2 · Sep 25, 2026
- CVE-2026-35048 The Piwigo installer in versions 16.3.0 and earlier accepts POST parameters for database configuration and writes them directly into a PHP configuration file wiCritical 9.8 · Jul 20, 2026
- CVE-2026-27885 Piwigo is an open source photo gallery application for the web.High 7.2 · Apr 3, 2026
- CVE-2026-27834 Piwigo is an open source photo gallery application for the web.High 7.2 · Apr 3, 2026
- CVE-2026-27833 Piwigo is an open source photo gallery application for the web.High 7.5 · Apr 3, 2026
- CVE-2026-27634 Piwigo is an open source photo gallery application for the web.High 8.7 · Apr 3, 2026
- CVE-2025-62406 Piwigo is a full featured open source photo gallery application for the web.High 8.1 · Nov 18, 2025
- CVE-2024-48311 Piwigo v14.5.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the Edit album function.High 8.8 · Oct 30, 2024
- CVE-2023-44393 Piwigo is an open source photo gallery application.Critical 9.3 · Oct 9, 2023
- CVE-2023-37270 Piwigo is open source photo gallery software.High 7.6 · Jul 7, 2023
- CVE-2023-33362 Piwigo 13.6.0 is vulnerable to SQL Injection via in the "profile" function.Critical 9.8 · May 23, 2023
- CVE-2023-33361 Piwigo 13.6.0 is vulnerable to SQL Injection via /admin/permalinks.php.Critical 9.8 · May 23, 2023
- CVE-2023-27233 Piwigo before 13.6.0 was discovered to contain a SQL injection vulnerability via the order[0][dir] parameter at user_list_backend.php.High 8.8 · May 17, 2023
- CVE-2023-26876 SQL injection vulnerability found in Piwigo v.13.5.0 and before allows a remote attacker to execute arbitrary code via the filter_user_id parameter to the adminHigh 8.8 · Apr 21, 2023
- CVE-2022-32297 Piwigo v12.2.0 was discovered to contain SQL injection vulnerability via the Search function.High 7.5 · Jul 14, 2022
- CVE-2021-40553 piwigo 11.5.0 is affected by a remote code execution (RCE) vulnerability in the LocalFiles Editor.High 8.8 · Jun 28, 2022
- CVE-2021-40317 Piwigo 11.5.0 is affected by a SQL injection vulnerability via admin.php and the id parameter.High 8.8 · May 26, 2022
- CVE-2020-19217 SQL Injection vulnerability in admin/batch_manager.php in piwigo v2.9.5, via the filter_category parameter to admin.php?page=batch_manager.High 8.8 · May 6, 2022
- CVE-2020-19216 SQL Injection vulnerability in admin/user_perm.php in piwigo v2.9.5, via the cat_false parameter to admin.php?page=group_perm.High 8.8 · May 6, 2022
- CVE-2020-19215 SQL Injection vulnerability in admin/user_perm.php in piwigo v2.9.5, via the cat_false parameter to admin.php?page=user_perm.High 8.8 · May 6, 2022
Part of our vulnerability database: the whole National Vulnerability Database plus CISA’s exploited list, refreshed twice a day. This is general guidance, not a review of your systems.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.