CVE-2014-4614: Multiple cross-site request forgery (CSRF) vulnerabilities in Piwigo before 2.6.2 allow remote attackers to...

Security readout for executives and security teams

Piwigo versions before 2.6.2 had CSRF flaws that could let an attacker trick a logged-in administrator into sending unwanted management requests. The cited impact is unauthorized changes to users, groups, or permissions. The provided sources do not show active exploitation. Exposure is likely limited to organizations running Piwigo before 2.6.2, especially internet-facing or shared administrative environments. The bundle provides no CPE detail or affected branch list beyond pre-2.6.2 Piwigo. Treat as a moderate priority if Piwigo is present. The issue can affect administrative control, but available evidence indicates it requires admin interaction and does not show known active exploitation. Mitigation focus: Upgrade Piwigo to 2.6.2 or later, following vendor release guidance.; Review the Piwigo bug and release notes for any deployment-specific guidance.; Restrict administrator access to trusted networks and browsers where practical..

Prepared

Jun 14, 2026, 13:53 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.