piwigo vulnerabilities

CVEs per yearBy the year they were published

1. 20192
2. 20232
3. 20251
4. 202613

Newest CVEs

• CVE-2026-42322

  Piwigo: Authenticated RCE via File Upload in Logo Upload Feature

  Piwigo · Piwigo

  Critical9.1
• CVE-2026-42324

  Piwigo: Second-Order SQL Injection

  Piwigo · Piwigo

  High7.2
• CVE-2026-44642

  Piwigo: SQL injection in upgrade authentication allows unauthenticated upgrade authorization bypass (PHP 8+)

  Piwigo · Piwigo

  High8.1
• CVE-2026-62262

  Piwigo: Unauthenticated SQL injection in `pwg.images.filteredSearch.create`

  Piwigo · Piwigo

  Critical9.1
• CVE-2026-42323

  Piwigo: SQL Injection in Batch Manager

  Piwigo · Piwigo

  High7.2
• CVE-2026-85750

  Piwigo arbitrary file read and remote code execution via insecure image processing

  Piwigo · Piwigo

  High7.2
• CVE-2026-35048

  Piwigo RCE via PHP Code Injection into Config File in Installer

  Piwigo · Piwigo

  Critical9.8
• CVE-2026-27885

  Piwigo: SQL Injection in Activity.getList

  Piwigo · Piwigo

  High7.2
• CVE-2026-27834

  Piwigo: SQL Injection in pwg.users.getList API Method via filter Parameter

  Piwigo · Piwigo

  High7.2
• CVE-2026-27833

  Piwigo: Unauthenticated Information Disclosure via pwg.history.search API

  Piwigo · Piwigo

  High7.5