Known Vulnerabilities for products from Piwigo
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Piwigo".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-85750 json | Not Provided | 2026-09-25 | 2026-09-25 | |
| CVE-2026-84441 json | Not Provided | 2026-09-02 | 2026-09-04 | |
| CVE-2026-78187 json | Not Provided | 2026-08-24 | 2026-08-24 | |
| CVE-2026-62262 json | Not Provided | 2026-09-25 | 2026-09-29 | |
| CVE-2026-44642 json | Not Provided | 2026-09-25 | 2026-09-25 | |
| CVE-2026-42324 json | Not Provided | 2026-09-25 | 2026-09-25 | |
| CVE-2026-42323 json | Not Provided | 2026-09-25 | 2026-09-28 | |
| CVE-2026-42322 json | Not Provided | 2026-09-25 | 2026-09-28 | |
| CVE-2026-35048 json | Not Provided | 2026-07-20 | 2026-07-20 | |
| CVE-2026-27885 json | Piwigo is an open source photo gallery application for the web. Prior to version 16.3.0, a SQL Injection vulnerability was di... | Not Provided | 2026-04-03 | 2026-07-24 |
| CVE-2026-27834 json | Piwigo is an open source photo gallery application for the web. Prior to version 16.3.0, a SQL Injection vulnerability exists... | Not Provided | 2026-04-03 | 2026-07-24 |
| CVE-2026-27833 json | Piwigo is an open source photo gallery application for the web. Prior to version 16.3.0, the pwg.history.search API method in... | Not Provided | 2026-04-03 | 2026-07-24 |
| CVE-2026-27634 json | Piwigo is an open source photo gallery application for the web. Prior to version 16.3.0, the four date filter parameters (f_m... | Not Provided | 2026-04-03 | 2026-07-24 |
| CVE-2024-46606 json | A cross-site scripting (XSS) vulnerability in the component /admin.php?page=photo of Piwigo v14.5.0 allows attackers to execu... | Not Provided | 2024-10-16 | 2026-07-05 |
| CVE-2024-46605 json | A cross-site scripting (XSS) vulnerability in the component /admin.php?page=album of Piwigo v14.5.0 allows attackers to execu... | Not Provided | 2024-10-16 | 2026-07-05 |
| CVE-2023-44393 json | Piwigo is an open source photo gallery application. Prior to version 14.0.0beta4, a reflected cross-site scripting (XSS) vuln... | 6.1 - MEDIUM | 2023-10-09 | 2023-10-13 |
| CVE-2023-37270 json | Piwigo is open source photo gallery software. Prior to version 13.8.0, there is a SQL Injection vulnerability in the login of... | 8.8 - HIGH | 2023-07-07 | 2023-07-14 |
| CVE-2023-34626 json | Piwigo 13.7.0 is vulnerable to SQL Injection via the "Users" function. | 4.3 - MEDIUM | 2023-06-15 | 2023-06-22 |
| CVE-2023-33362 json | Piwigo 13.6.0 is vulnerable to SQL Injection via in the "profile" function. | 9.8 - CRITICAL | 2023-05-23 | 2023-05-30 |
| CVE-2023-33361 json | Piwigo 13.6.0 is vulnerable to SQL Injection via /admin/permalinks.php. | 9.8 - CRITICAL | 2023-05-23 | 2023-05-30 |