Release note / Piwigo 16.3.0

bug fixes

16.3.0
Download Piwigo 16.3.0

Released on February 24th, 2026

md5sum

The list of major changes is described on Piwigo 16.0.0 release note

Bugs fixed

Languages

Upgrade

Bugs fixed

2528 / Display

Missing remove icon on selected related tags

2525 / Display

Missing translation in groups selection mode

2522 / UX

[standard pages] password reset success message is misleading

2519 / Albums

[SECURITY] CSRF vulnerability in album email sending

2518 / Display

Standard pages responsive design not good

2517 / Display

Standard pages language switch overflows

2510 / Photos

[16.x] stripslashes(): Passing null to parameter #1 ($string) of type string is deprecated in pwg.comments.php

2509 / Technical

wrong button label in site_update.tpl

2508 / Display

Standard pages uses default theme header.tpl

2507 / Technical

album notification, template error in email sent

2503 / UX

Auto update button not visible

2501 / Technical

Add a more granular container detection

2499 / Technical

check for new Piwigo versions generates too many requests on piwigo.org

GHSA-mgqc-3445-qghq

Pre-auth SQL injection via date filter parameters in ws_std_image_sql_filter

GHSA-397m-gfhm-pmg2

Unauthenticated Information Disclosure via pwg.history.search API

GHSA-5jwg-cr5q-vjq2

SQL Injection in pwg.users.getList API Method via filter Parameter

GHSA-wfmr-9hg8-jh3m

SQL Injection in Activity.getList

Languages

Updated languages

Czech (Česky)

English

Finnish (suomi)

French (Français)

Hebrew (עברית)

Hungarian (Magyar)

Korean (한국어)

Portuguese (Português)

Romanian (Română)

Russian (Русский)

Slovak (Slovensky)

Turkish (Türkçe)

Chinese (简体中文)

Upgrade

We recommend the automatic upgrade. If you're running version 2.2+, Piwigo will tell you which plugins may be not compatible with Piwigo 16 before upgrade.

If you're running Piwigo 16.x you can also download the 16.x_to_16.3.0.zip archive that contains all new and modified files. Once you have extracted the files, transfer them onto your web server with a FTP client over your Piwigo 16.x installation. No database upgrade is required.

If you are running a version older than 16 and do not want to use the automatic upgrade, then follow the manual upgrade.