agentprime: piwigoEvery new CVE for piwigo.https://agentprime.io/CVE-2026-42322: Piwigo: Authenticated RCE via File Upload in Logo Upload Featurehttps://agentprime.io/advisories/CVE-2026-42322/https://agentprime.io/advisories/CVE-2026-42322/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 15:50:34 GMTCVEcriticalCVE-2026-42324: Piwigo: Second-Order SQL Injectionhttps://agentprime.io/advisories/CVE-2026-42324/https://agentprime.io/advisories/CVE-2026-42324/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 15:48:55 GMTCVECVE-2026-44642: Piwigo: SQL injection in upgrade authentication allows unauthenticated upgrade authorization bypass (PHP 8+)https://agentprime.io/advisories/CVE-2026-44642/https://agentprime.io/advisories/CVE-2026-44642/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 15:47:59 GMTCVECVE-2026-62262: Piwigo: Unauthenticated SQL injection in `pwg.images.filteredSearch.create`https://agentprime.io/advisories/CVE-2026-62262/https://agentprime.io/advisories/CVE-2026-62262/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 15:46:04 GMTCVEcriticalCVE-2026-42323: Piwigo: SQL Injection in Batch Managerhttps://agentprime.io/advisories/CVE-2026-42323/https://agentprime.io/advisories/CVE-2026-42323/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 15:42:01 GMTCVECVE-2026-85750: Piwigo arbitrary file read and remote code execution via insecure image processinghttps://agentprime.io/advisories/CVE-2026-85750/https://agentprime.io/advisories/CVE-2026-85750/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 13:51:07 GMTCVECVE-2026-84441: Piwigo Image Derivative i.php path traversalhttps://agentprime.io/advisories/CVE-2026-84441/https://agentprime.io/advisories/CVE-2026-84441/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 02 Sep 2026 02:15:08 GMTCVECVE-2026-78187: Piwigo Public Authentication cross site scriptinghttps://agentprime.io/advisories/CVE-2026-78187/https://agentprime.io/advisories/CVE-2026-78187/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 24 Aug 2026 04:30:08 GMTCVECVE-2026-35048: Piwigo RCE via PHP Code Injection into Config File in Installerhttps://agentprime.io/advisories/CVE-2026-35048/https://agentprime.io/advisories/CVE-2026-35048/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 20 Jul 2026 16:27:09 GMTCVEcriticalCVE-2026-27885: Piwigo: SQL Injection in Activity.getListhttps://agentprime.io/advisories/CVE-2026-27885/https://agentprime.io/advisories/CVE-2026-27885/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 03 Apr 2026 21:36:07 GMTCVECVE-2026-27834: Piwigo: SQL Injection in pwg.users.getList API Method via filter Parameterhttps://agentprime.io/advisories/CVE-2026-27834/https://agentprime.io/advisories/CVE-2026-27834/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 03 Apr 2026 21:35:13 GMTCVECVE-2026-27833: Piwigo: Unauthenticated Information Disclosure via pwg.history.search APIhttps://agentprime.io/advisories/CVE-2026-27833/https://agentprime.io/advisories/CVE-2026-27833/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 03 Apr 2026 21:34:11 GMTCVECVE-2026-27634: Piwigo: Pre-auth SQL injection via date filter parameters in ws_std_image_sql_filterhttps://agentprime.io/advisories/CVE-2026-27634/https://agentprime.io/advisories/CVE-2026-27634/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 03 Apr 2026 21:33:13 GMTCVECVE-2025-62512: Piwigo Vulnerable to User Enumeration via Password Reset Endpointhttps://agentprime.io/advisories/CVE-2025-62512/https://agentprime.io/advisories/CVE-2025-62512/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 24 Feb 2026 16:43:28 GMTCVECVE-2024-48928: Piwigo's secret key can be brute forcedhttps://agentprime.io/advisories/CVE-2024-48928/https://agentprime.io/advisories/CVE-2024-48928/CVSS 2.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 24 Feb 2026 16:39:56 GMTCVECVE-2025-62406: Piwigo is vulnerable to one-click account takeover by modifying the password-reset linkhttps://agentprime.io/advisories/CVE-2025-62406/https://agentprime.io/advisories/CVE-2025-62406/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Nov 2025 22:18:45 GMTCVECVE-2023-44393: Piwigo Reflected XSS vulnerabilityhttps://agentprime.io/advisories/CVE-2023-44393/https://agentprime.io/advisories/CVE-2023-44393/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 09 Oct 2023 14:52:42 GMTCVEcriticalCVE-2023-37270: Piwigo SQL Injection vulnerability in "User-Agent"https://agentprime.io/advisories/CVE-2023-37270/https://agentprime.io/advisories/CVE-2023-37270/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 07 Jul 2023 21:26:28 GMTCVECVE-2016-3735: Piwigo is image gallery software written in PHP.https://agentprime.io/advisories/CVE-2016-3735/https://agentprime.io/advisories/CVE-2016-3735/Published by the CVE Program. Not analysed by agentprime yet.Fri, 28 Jan 2022 00:00:00 GMTCVECVE-2012-4526: piwigo has XSS in password.php (incomplete fix for CVE-2012-4525)https://agentprime.io/advisories/CVE-2012-4526/https://agentprime.io/advisories/CVE-2012-4526/Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Dec 2019 17:48:45 GMTCVECVE-2012-4525: piwigo has XSS in password.phphttps://agentprime.io/advisories/CVE-2012-4525/https://agentprime.io/advisories/CVE-2012-4525/Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Dec 2019 17:46:59 GMTCVE