Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

matomoteam vulnerabilities

3 published CVEs name matomoteam among the affected products.

All 3 in the listAtom feed of new CVEs
Published CVEs
3
Last 12 months
0
Critical
0
Known exploited
0

Critical 0High 0Medium 3Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20231
  2. 20241
  3. 20251

Newest CVEs

  • CVE-2024-38766

    WordPress Matomo Analytics plugin <= 5.1.1 - Cross Site Request Forgery (CSRF) leading to Notice Dismissal vulnerability

    matomoteam · Matomo Analytics

    Medium4.3
  • CVE-2023-6923

    Matomo <= 4.15.3 - Reflected Cross-Site Scripting via idsite

    matomoteam · Matomo Analytics – Powerful, Privacy-First Insights for WordPress

    Medium6.1
  • CVE-2023-4774

    WP-Matomo Integration (WP-Piwik) <= 1.0.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    matomoteam · Connect Matomo – Analytics Dashboard for WordPress

    Medium6.4

Products with the most CVEs

  1. Connect Matomo – Analytics Dashboard for WordPress1
  2. Matomo Analytics1
  3. Matomo Analytics – Powerful, Privacy-First Insights for WordPress1

Most common weaknesses

  1. CWE-79 Cross-site scripting (XSS)2
  2. CWE-352 Cross-site request forgery (CSRF)1