This is pretty bad. Piwik <i>could</i> be a high value target depending on the nature of the site it is used to analyze.<p>I can&#x27;t believe unsalted MD5 is &quot;by design&quot; (<a href="https:&#x2F;&#x2F;github.com&#x2F;piwik&#x2F;piwik&#x2F;issues&#x2F;8753" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;piwik&#x2F;piwik&#x2F;issues&#x2F;8753</a>).