[ Vendor · 6 CVEs ]

Piwigo

CVEs affecting Piwigo published in the last 30 days, plus any Piwigo CVE on CISA's exploited list.

CVEPublishedSeverityVulnerabilitySignals
CVE-2026-62262 25 Sep 2026 CVSS 9.1 PiwigoPiwigo is a full featured open source photo gallery application for the web. In 17.0.0beta1 and earlier, when rating is enabled, an unauthenticated…
CVE-2026-42322 25 Sep 2026 CVSS 9.1 PiwigoPiwigo is a full featured open source photo gallery application for the web. Prior to 16.4.0, admin/themes_standard_pages.php validates uploaded logo…
CVE-2026-42323 25 Sep 2026 CVSS 7.2 PiwigoPiwigo is a full featured open source photo gallery application for the web. Prior to 16.4.0, admin/batch_manager.php accepts…
CVE-2026-42324 25 Sep 2026 CVSS 7.2 PiwigoPiwigo is a full featured open source photo gallery application for the web. Prior to 16.4.0, admin/element_set_ranks.php stores…
CVE-2026-44642 25 Sep 2026 CVSS 8.1 PiwigoPiwigo is a full featured open source photo gallery application for the web. Prior to 16.4.0, check_upgrade_access_rights() in…
CVE-2026-85750 25 Sep 2026 CVSS 7.2 PiwigoPiwigo before v16.4.0 is vulnerable to arbitrary file read and remote code execution in image upload handling when using the Imagick library due to…