matomoteam
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Connect Matomo – Analytics Dashboard for WordPress | 1 | – | Sep 22, 2023 |
| Matomo Analytics | 1 | – | Jan 2, 2025 |
| Matomo Analytics – Powerful, Privacy-First Insights for WordPress | 1 | – | Feb 20, 2024 |
Exploited and recent CVEs
- CVE-2024-38766 WordPress Matomo Analytics plugin <= 5.1.1 - Cross Site Request Forgery (CSRF) leading to Notice Dismissal vulnerability 0.2%
- CVE-2023-6923 Matomo <= 4.15.3 - Reflected Cross-Site Scripting via idsite 0.5%
- CVE-2023-4774 WP-Matomo Integration (WP-Piwik) <= 1.0.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.7%