Matomo

22.10.2026 02:59

What’s new in our latest release?

Matomo 5.14.2 is a patch release with an important security notice.

Important security update for our Matomo On-premise or self hosted users: On 21 October 2026, two critical vulnerabilities were disclosed in PHP, the technology Matomo runs on. Both are rated 9.2/10 in severity (CVE-2026-109618 and CVE-2026-109619). Updating Matomo alone will not apply these fixes. Read the Matomo security guidance for more information.

Update Matomo to the latest release

Database upgrade

This release does not contain any major database upgrade.

Need help upgrading Matomo?

Read the Updating Matomo user guide or for more help we offer paid support plans.

After you update

Please help us spread the word! Maybe you can write about the project on your blog, website, social media, get involved with MatomoCamp or let your friends and colleagues know what is Matomo. Already 1,000,000+ websites are keeping full control of their web analytics with Matomo!
Use the forums if you have any question or feedback (free support),
or purchase a Support Plan to get professional support and guidance.
To improve Matomo in your language consider contributing to translations.
You can also support our efforts by purchasing valuable Premium Features for Matomo or try our Matomo Cloud solution.

Tickets closed in Matomo 5.14.2

Security

#25563 Update composer/ca-bundle to 1.6.0. [by sgiehl]
#25566 Urgent Core release: warn On-Premise users running affected PHP versions [by chippison]

The post Matomo 5.14.2 appeared first on Analytics Platform - Matomo.

Matomo 5.14.1

04.10.2026 19:51

What’s new in our latest release?

Matomo 5.14.1 is a patch release with general fixes.

Update Matomo to the latest release

Database upgrade

This release does not contain any major database upgrade.

Need help upgrading Matomo?

Read the Updating Matomo user guide or for more help we offer paid support plans.

After you update

Please help us spread the word! Maybe you can write about the project on your blog, website, social media, get involved with MatomoCamp or let your friends and colleagues know what is Matomo. Already 1,000,000+ websites are keeping full control of their web analytics with Matomo!
Use the forums if you have any question or feedback (free support),
or purchase a Support Plan to get professional support and guidance.
To improve Matomo in your language consider contributing to translations.
You can also support our efforts by purchasing valuable Premium Features for Matomo or try our Matomo Cloud solution.

Tickets closed in Matomo 5.14.1

Core improvements

#25282 Update the add to cart modal CTA footer. [by @AltamashShaikh]
#25300 Fix a race condition in nonce validation. [by @chippison]
#25337 Send temperature only to Bedrock models that support it. [by @mneudert]
#25365 Fix goal recommendation UI issues and reload the page after goal creation. [by @maxtaube]
#25395, #25369 Refresh Marketplace lists in the background instead of hourly. [by @snake14]
#25397 Redesign the Marketplace and give plugin details their own page. [by @lachiebol]
#25398 Add trigger-based in-app promotions. [by @AltamashShaikh]

The post Matomo 5.14.1 appeared first on Analytics Platform - Matomo.

Matomo 5.14.0

21.09.2026 21:15

What’s new in our latest release?

Matomo 5.14.0, our latest minor release, introduces reporting and Matomo Tag Manager improvements, along with general fixes.

Release Highlights

Real-time insights that support compliance

You can still keep track of real-time activity when compliance requirements mean the Visits Log must be disabled. The latest Matomo version provides aggregated real-time counters showing the real-time counts of visits and actions without displaying individual visit details.

To enable this feature for all websites, go to Administration > System > General settings > Live, or enable the report for specific websites only by editing the site settings. Learn more about how to enable aggregated real-time counters.

Update Matomo to the latest release

Database upgrade

This release does not contain any major database upgrade.

Need help updating Matomo?

Read the Updating Matomo user guide
or for more help we offer paid support plans.

After you update

Please help us spread the word! Maybe you can write about the project on your blog, website, social media, get involved with MatomoCamp or let your friends and colleagues know what is Matomo. Already 1,000,000+ websites are keeping full control of their web analytics with Matomo!
Use the community forums if you have any question or feedback (free support), or purchase a Support Plan to get professional support and guidance.
To improve Matomo in your language, consider contributing to translations.
You can also purchase valuable Premium Features for Matomo or try our Matomo Cloud solution.

Tickets closed in Matomo 5.14.0

Core improvements

#25090, #25076 Show percentage of report total in AI Chatbot reports. [by @sgiehl]
#25175, #25115 Forecast unique visitors and distinct counts from period-level history. [by @mneudert]
#24928 Render pie charts as perfect circles with clean slice edges. [by @nathangavin]
#24969 Show aggregated real-time counters when Visits Log is disabled. [by @nathangavin]
#25056 Report empty login fields instead of disabling the sign-in button. [by @chippison]
#25057 Refresh the login and invitation page layout. [by @chippison]
#25058 Add a “What’s New” panel to the login layout. [by @chippison]
#25084 Show the selected goal’s conversions in bar, pie and evolution charts. [by @nathangavin]
#25093 Align PDF report label linking with the HTML report renderer. [by @sgiehl]
#25116 Add events to customise the no data page. [by @caddoo]
#25133 Show percentages on subpages of a searched report. [by @chippison]
#25152, #3426 Split All Websites out of the Compliance page website selector. [by @nathangavin]
#25179 Restore the period tooltip on redesigned sparkline cards. [by @chippison]
#25207 Speed up loading of the Marketplace page. [by @snake14]
#25228 Stop widget controls squeezing the report header title. [by @chippison]
#25280 Size sparkline card images from the measured container instead of scaling. [by @chippison]

Matomo Tag Manager

#1145, #123, #1148 Improve help icon position on card hover. [by @tzi]
#1152, #123 Update variable name change handling. [by @lachiebol]
#1155 Update mobile left-menu screenshot for the search-input restyle. [by @tzi]
#1157 Fix error when creating new tags by publishing a default container version. [by @AltamashShaikh]
#1184 Fix loader not displaying correctly in dark mode. [by @chippison]
#1190 Type tag, trigger and variable type parameters as plugin settings. [by @mneudert]
#1153 Clarify the preview mode notification. [by werner-calitz-innocraft]

New and updated guides and FAQs

The post Matomo 5.14.0 appeared first on Analytics Platform - Matomo.

Matomo 6.0.0 Beta

09.09.2026 08:24

What’s new in our latest release?

Matomo 6.0.0 is the first major release since December 2023. It modernises the platform with PHP 8.1, MySQL 8 and a rebuilt front-end toolchain. It also builds spam and bot filtering into Matomo, introduces completely redrawn visitor maps, and applies the new design system to dropdowns, search fields and report headers.

On-Premise administrators should review the system requirement changes before updating.

Release Highlights

Less junk in your data

Spam and bot filtering, previously available as a separate plugin, is now part of Matomo and enabled by default.

A fresh look at your maps

Visitor and real-time maps have been enhanced using current geographic data, improving region highlighting and country label accuracy.

Consistent controls everywhere

Dropdowns, select fields and search boxes now share a consistent appearance and behaviour, and reports use the same header design.

Faster page reports

New installations archive page URL and page title reports from a single flattened record, improving performance for large sites.

Update Matomo to the latest release

Before updating, confirm that your system meets the following requirements and plan for the database change included in this release.

System requirements

Matomo 6 requires PHP 8.1 or newer and MySQL 8.0 or MariaDB 10.6. Installations using older versions must upgrade them before updating Matomo.

Database upgrade

This release adds a consent column to the log_visit table in preparation for consent tracking. The update runs an ALTER TABLE operation, which may take time on installations with a large visits log.

Need help updating Matomo?

Read the Updating Matomo user guide or for more help we offer paid support plans.

After you update

Please help us spread the word! Maybe you can write about the project on your blog, website, social media, get involved with MatomoCamp or let your friends and colleagues know what is Matomo. Already 1,000,000+ websites are keeping full control of their web analytics with Matomo!
Use the community forums if you have any question or feedback (free support), or purchase a Support Plan to get professional support and guidance.
To improve Matomo in your language, consider contributing to translations.
You can also purchase valuable Premium Features for Matomo or try our Matomo Cloud solution.

Tickets closed in Matomo 6.0.0

Requirements and removals

#21736, #24638 Require PHP 8.1 or newer. Installations using PHP 8.0 or older must upgrade PHP before updating to Matomo 6. [by @mneudert, @sgiehl]
#24858 Require MySQL 8.0 or MariaDB 10.6. Matomo now validates the actual database server type, distinguishes MariaDB Enterprise from Community and removes the experimental TiDB schema. [by @sgiehl]
#24877 Require One Click Update to download over HTTPS by removing the option to retry over HTTP. [by @sgiehl, @chippison]
#18675, #25206 Validate the effective hostname for Matomo installations behind a proxy. Before updating an installation that uses proxy_host_headers, add both the public hostname and the hostname used to access Matomo to trusted_hosts. [by @sgiehl]
#25062 Add a consent column to log_visit in preparation for consent tracking. The database upgrade runs an ALTER TABLE operation on the visits table. [by @sgiehl]
#19665, #21780 Remove the SEO plugin and the SEO.getRank API method. The SEO Rankings widget was retired in Matomo 5.9 because it could no longer retrieve rankings reliably. [by @sgiehl, @chippison]

Core improvements

#25035, #25079 Build Tracking Spam Prevention into Matomo and enable it by default, including filtering for headless-browser traffic generated by AI tools. The plugin is no longer available from the Marketplace and cannot be uninstalled. [by @sgiehl]
#10739, #24983 Add a …_percent_of_total column for each metric in API responses and every export format. Add percent_of_total=0 to a request to retain the previous columns. [by @caddoo]
#11929, #9170, #10963, #24878 Regenerate visitor and real-time maps using current geographic data to improve region matching, highlighting and country accuracy. [by @sgiehl, @ysard]
#25150 Archive page URL and page title reports from a single flattened record on new installations, improving performance for large sites and preventing long page categories from being truncated with a summary row. Updated installations retain their existing behaviour. [by @sgiehl, @snake14]

Interface improvements

#23917, #25033, #25100, #24868 Standardise dropdowns, select fields, menus and reorderable lists across Matomo. [by @snake14, @chippison, @tzi]
#24970, #24991 Use a consistent search component for menu search, segment search and quick access, and support pasted text and input method editors in quick access. [by @tzi]
#24966, #24989 Use a consistent header for full-page reports, exported widgets and dashboard widgets, and add a More details link when an online guide is available. [by @tzi]
#25109, #25122, #25131 Rebuild the Transitions report as a Vue component and retain its side-by-side layout in narrow panes by allowing horizontal scrolling. [by @chippison]
#24891, #24953 Separate the green success colour from Matomo’s teal brand colour. [by @tzi]

Bug fixes

#23979, #24854 Update report help when switching between related reports. [by @chippison]
#20216, #24742 Allow Unique Visitors and Unique Users to be selected as KPIs for weekly and monthly periods. [by @chippison]
#24543 Correctly combine a selected report row with an applied segment when opening the visits log, and clarify the popup title. [by @tzi]
#24088, #25094 Position country labels inside the correct country on region maps. [by @sgiehl]
#25161 Show the selected data period in downloaded HTML reports instead of the report delivery schedule. [by @sgiehl]
#25001, #25002 Prevent correctly rendered dashboard widgets from displaying an error caused by an internal API call. [by @snake14, @sgiehl]
#25040 Apply the correct comparison colours to overview card sparklines from the first page load. [by @tzi]

Security and privacy

#22605 Require Write permission to add, edit or delete annotations through the API. [by @sgiehl]
#24865 Prevent user capabilities from being granted or removed when user management is disabled. [by @sgiehl]
#24917 Respect the visits log setting for every site included in a Live API request. [by @chippison]
#25137 Harden tracking code generation by escaping output consistently, preventing unusable tracker URLs and requiring view access to generate image tracking code. [by @sgiehl]
#24864 Use constant-time comparisons for signed cookie values, improve pattern handling when rewriting URL parameters in the browser and remove unused internal methods. [by @sgiehl]

Platform changes for plugin developers

#24880, #24893 Remove long-deprecated APIs, including Archive::getBlob(), Report::getThirdLeveltableDimension(), API.getSettings, the [APISettings] configuration section and database adapters’ getDefaultPort(). See CHANGELOG.md for their replacements. [by @sgiehl, @caddoo]
#23183, #25072, #24988, #24933 Remove the archive.sh script, deprecated Git console commands, the jQuery UI liveWidget and obsolete PHP polyfills. Use core:archive and the Live.AutoRefreshWidget Vue component instead. glob() must no longer be listed in disable_functions. [by @sgiehl]
#25074 Preserve parameter whitespace and value types when parsing requests. Use Request::getBoolParameter() to read Boolean parameters. [by @sgiehl]
#24869 Add the #[Piwik\Http\JsonResponse] attribute for returning JSON from controller actions. An overriding subclass must redeclare the attribute. [by @sgiehl]
#21440, #24668, #25027 Move the front-end build from Vue CLI to Vite on Node 24, update to Vue 3.5 and use Vitest. The vue:build command no longer creates an unminified bundle, so plugin authors can remove committed vue/dist/<Plugin>.umd.js files. [by @sgiehl]
#25051 Update all eleven Example plugins to use native types, current APIs and a consistent structure. [by @sgiehl]
#24925, #24937 Remove unused colour variables and Piwik-era aliases, and deprecate component-oriented theme variables in favour of usage-oriented names. Deprecated variables remain available until Matomo 7. [by @tzi]

New and Updated Guides and FAQs

The post Matomo 6.0.0 Beta appeared first on Analytics Platform - Matomo.

Matomo 5.13.0

16.08.2026 22:19

What’s new in our latest release?

Matomo 5.13.0, our latest minor release, introduces enhancements to reporting and user management, alongside general maintenance and security fixes.

Release Highlights

Sparklines enhanced for clearer reporting

Sparkline summary cards have been redesigned to make key metrics easier to scan and compare. Each metric now appears in a distinct card with a clear title and larger value.

The layout automatically adapts to the available screen space, including within dashboard widgets. Comparisons across dates, segments, or both are also presented more clearly, making differences between metrics easier to analyse.

Update Matomo to the latest release

Database upgrade

This release does not contain any major database upgrade.

Need help updating Matomo?

Read the Updating Matomo user guide
or for more help we offer paid support plans.

After you update

Please help us spread the word! Maybe you can write about the project on your blog, website, social media, get involved with MatomoCamp or let your friends and colleagues know what is Matomo. Already 1,000,000+ websites are keeping full control of their web analytics with Matomo!
Use the community forums if you have any question or feedback (free support), or purchase a Support Plan to get professional support and guidance.
To improve Matomo in your language, consider contributing to translations.
You can also purchase valuable Premium Features for Matomo or try our Matomo Cloud solution.

Tickets closed in Matomo 5.13.0

Core improvements

#24844 Fix archive aggregation across multiple sites for the same period. [by @sgiehl]
#24879 Name the reportTotal metric keys in Referrers.getAll. [by @mneudert]
#24775 Require password confirmation when granting the admin role. [by @sgiehl]
#24791 Move submodule markers back to 5.x-dev [by @sgiehl]
#24797 Add no-data banner to the AI Chatbot Real-time page. [by @nathangavin]
#24824 Fix unreadable Display options label in Dark Mode on scheduled reports. [by @caddoo]
#24828 Show a clear error for empty patterns on non-manual goals. [by @nathangavin]
#24831 Cap Ecommerce money values and handle extreme amounts safely. [by @nathangavin]
#24834, #24803 Add opt-in SSRF-safe HTTP fetch for user-configured URLs. [by @maxtaube]
#24837 Improve Row Evolution modal text contrast in Dark Mode. [by @caddoo]
#24838, #21944 Persist ViewDataTable settings per container across reloads. [by @nathangavin]
#24842 Serve flat Actions reports from the pre-flattened archive. [by @sgiehl]
#24851, #24786 Add DateAtom sparkline-card component. [by @chippison]
#24852, #24787 Add the Date Comparison mode card. [by @chippison]
#24853, #24816 Backport Segment and Date Comparison mode to 5.x. [by @chippison]
#24862 Apply table search filter after combining multi-dimension labels [by @nathangavin]
#24870, #21812 Show small Referrers channel-type shares precisely instead of 0%. [by @nathangavin]
#24871 Add What’s New entry for Cohorts and Funnels dashboard widgets. [by @snake14]
#24876 Migrate the widget header to a Vue component. [by @tzi]
#24883, #24881 Differentiate EOL for MariaDB Community and Enterprise Server. [by @YKWeyer]
#24892 Improve help icon position on card hover. [by @Armanio, @tzi]
#24900 Scale metric value font to container size to prevent overflow. [by @chippison]
#24903 Prevent stale idsite from persisting in marketplace links. [by @nathangavin]
#24909 Correctly override trust_visitors_cookies for intranet sites. [by @mroosz-c24, @tzi]
#24911, #20297 Allow pending invitees to recover account access. [by @drewmt]
#24913 Detect Google-GeminiNotebook as Google-NotebookLM. [by @eldk]
#24920 Harden Page Overlay API request handling. [by @nathangavin]
#24922 Render the sparklines grid using CSS grid. [by @chippison]
#24926 Fix mismatched Ecommerce metric labels on sparkline cards. [by @chippison]
#24930 Fix metric selector spacing on bar and pie charts. [by @chippison]
#24938 Show metric forecast on evolution graphs for incomplete periods. [by @mneudert]
#24939 Fix value substitution in sparkline description placeholders. [by @sgiehl]
#24941 Fix oversized sparklines on the Segment Management page. [by @chippison]
#24950 Fix rendering of sparkline description placeholders [by @sgiehl]
#24962 Scope goal-name segment matching to the correct site. [by @sgiehl]
#24965 Encode comparison series suffix in comparison labels. [by @sgiehl]
#24992 Update sparkline UI screenshots and specs for the redesign. [by @chippison]
#24993 Enable the sparklines redesign for all users. [by @chippison]
#25037 Add AIProviders plugin. [by @mneudert]
#24849, #21789 Improve error message for users using a Secure Only token in the API. [by @chippison]

Matomo Tag Manager

#1148 Improve help icon positioning on card hover [by @tzi]

New and Updated Guides and FAQs

The post Matomo 5.13.0 appeared first on Analytics Platform - Matomo.