Retailers and manufacturers with huge catalogs B2B eCommerce teams Organizations with in-house PHP developers Teams wanting PIM+DAM+CMS unified

Who is Pimcore not for?

Small shops with a few hundred SKUs Non-technical teams without developers or agency budget Buyers wanting transparent, predictable SaaS pricing Anyone needing just a simple product list — use a spreadsheet

shouldiuse.io

Pimcore Review

Depends

Should I use Pimcore?

The Future of Data & Experience Management - pimcore.com

Analyzed October 9, 2026 · 1 week ago

Buy it if you run a large, complex product catalog and have PHP developers or agency budget to run it. Small teams and non-technical users will drown — use a simple SaaS PIM or spreadsheet instead.

Confidence

Medium. Based on ~20 public sources; review snippets were partially truncated, so quotes are fragments.

Ratings

Value for money
Ease of use
Feature depth
Support qualityNo direct evidence in sources
Security posture

Pricing

Free

Community Edition

ModelQuote-based

Monthly feesNot disclosed

HardwareNot disclosed

Free tierYes

Enterprise EditionQuote-based

Enterprise PaaSQuote-based

Best for

Retailers and manufacturers with huge catalogs
B2B eCommerce teams
Organizations with in-house PHP developers
Teams wanting PIM+DAM+CMS unified

Not for

Small shops with a few hundred SKUs
Non-technical teams without developers or agency budget
Buyers wanting transparent, predictable SaaS pricing
Anyone needing just a simple product list — use a spreadsheet

Gotchas - check before you buy

high

Self-hosted means you patch CVEs yourself; SQLi/RCE flaws from 2018–2026 demand fast upgrades.

high

Open-source functionality migrating behind paid Enterprise/PaaS editions over time.

medium

No published prices; Enterprise cost revealed only after sales contact.

medium

Thin community: users ask why the official subreddit is dead.

Pros

Free, open-source Community Edition
Combines PIM, DAM, CMS and commerce in one platform
Built to manage vast amounts of product data
Managed PaaS option removes self-hosting burden
Users call it 'super powerful'

Cons

Steep learning curve; complex to run
Needs developers or agencies; not no-code
Enterprise pricing opaque and quote-based
Features shifting into paid Enterprise editions
Repeated SQL injection and RCE vulnerabilities

Sources & method

Analyzed October 9, 2026 - 17 sources - Recurring CVEs from 2018–2026 — SQL injection, RCE, auth bypass — demand disciplined patching, especially if self-hosted.

official x5review x4security x4news x4

SQL Injection CVE-2023-3820, SQL injection flaw in pimcore/pimcore disclosed July 2023.
Drive-by RCE in Pimcore 6.2.0, SonarSource disclosed an exploit allowing remote code execution.
Auth bypass CVE-2026-23494, Authentication bypass vulnerability disclosed January 2026.
SQL injection in DataObjects (v12.3.3), 2026 advisory: SQL injection permits unauthorized data access.

Key stats

Value for money: 3/5
Rating
Free
Starting price
17
Sources
October 9, 2026
Analyzed

Value for money: 3/5. Free Community Edition; Enterprise pricing opaque and quote-only
Ease of use: 2/5. Powerful but taxing; developer-heavy
Feature depth: 5/5. PIM, DAM, CMS, commerce, data model in one
Support quality. No direct evidence in sources
Security posture: 2/5. Recurring SQLi, RCE, auth-bypass CVEs since 2018

118,000+ Companies using per Pimcore's own marketing
Yes Free tier open-source Community Edition
Quote-based Pricing model Enterprise and PaaS; no public prices
7+ Public CVEs 2018–2026, incl. SQLi and auth bypass

Pricing

Community Edition

Free

Open source, self-hosted
Core PIM/DAM/CMS
You manage hosting and patches

Enterprise Edition

Quote-based

Long-term support
Enterprise features
Vendor support

Enterprise PaaS

Quote-based

Managed cloud hosting
Platform maintained by Pimcore

Security

Recurring CVEs from 2018–2026 — SQL injection, RCE, auth bypass — demand disciplined patching, especially if self-hosted.

SQL Injection CVE-2023-3820SQL injection flaw in pimcore/pimcore disclosed July 2023.¹³
Drive-by RCE in Pimcore 6.2.0SonarSource disclosed an exploit allowing remote code execution.¹⁴

Auth bypass CVE-2026-23494Authentication bypass vulnerability disclosed January 2026.¹⁵
SQL injection in DataObjects (v12.3.3)2026 advisory: SQL injection permits unauthorized data access.¹⁶

What users say

Users praise Pimcore's power for heavy product data but warn it is complex, developer-dependent, and community support is thin.

“It is super powerful but also ta”

Reddit, r/PHP

“So it's not perfect but a”

Reddit, r/PHP

Alternatives

Compare Pimcore with each alternative.

Akeneo
Purpose-built PIM; the most-cited Pimcore alternative
Pimcore vs Akeneo
Salsify
SaaS PIM aimed at retail and eCommerce teams
Pimcore vs Salsify
ProductBay
SaaS PIM pitched as needing no dev team
Pimcore vs ProductBay

Spreadsheet (Sheets/Airtable)
Under ~1,000 SKUs, this beats the overhead

Companies that use it

PMG
mStore
Läderach¹²

Full analysis

Based on ~20 public sources; review snippets were partially truncated, so quotes are fragments.

Enterprise PIM/DAM/CMS powerhouse — fits big product catalogs with devs; overkill for small teams.

Methodology

Based on ~20 public sources; review snippets were partially truncated, so quotes are fragments.

Read how a report is made.

Sources

Pimcore homepagepimcore.com
official
Pimcore Pricing Overviewpimcore.com
official
Pimcore Enterprise PaaS Editionpimcore.com
official
Pimcore about uspimcore.com
official
Pimcore pricing discussion #19009github.com
official
Anyone have experience using Pimcore? — Reddit r/PHPreddit.com
review
Pimcore Reviews — G2g2.com
review
Pimcore Reviews — Gartner Peer Insightsgartner.com
review
If pimcore is so great, why is this sub dead? — Redditreddit.com
review
Pimcore Pricing Explained — Credencyscredencys.com
news
Selected Pimcore Alternatives for PIM — AtroPIMatropim.com
news
Läderach Pimcore case study — Scandiwebscandiweb.com
news
SQL Injection CVE-2023-3820 — Snyksecurity.snyk.io
security
Drive-by RCE exploit in Pimcore 6.2.0 — SonarSourcesonarsource.com
security
CVE-2026-23494 auth bypass — SentinelOnesentinelone.com
security
SQL injection in DataObjects v12.3.3 — Fluid Attacksfluidattacks.com
security
Pimcore platform flaws exposed users to code execution — SecurityWeeksecurityweek.com
news

Add this review to your site

This check for Pimcore says Depends.

Put the badge on your site.

Visitors see the independent review.

The link points here, and search engines follow it.

This is the badge visitors see on your site.

Depends Pimcore Independent review on Should I Use It

Badge code

<!-- Should I Use It badge. Keep this link. -->
<a href="https://shouldiuse.io/r/pimcore" target="_blank" style="display:inline-flex;flex-direction:column;align-items:flex-start;gap:8px;max-width:420px;box-sizing:border-box;padding:14px 16px;border:1px solid #d5dde4;border-radius:14px;background:#ffffff;color:#111111;font-family:Segoe UI,system-ui,sans-serif;line-height:1.25;text-decoration:none;box-shadow:0 8px 20px rgba(17,17,17,0.08);">
  <span style="display:flex;align-items:center;gap:10px;min-width:0;">
    <span style="display:inline-flex;align-items:center;flex:0 0 auto;border-radius:999px;padding:4px 10px;font-size:11px;font-weight:700;letter-spacing:0.06em;text-transform:uppercase;line-height:1.3;background:#fef7e0;color:#7a5510;">Depends</span>
    <span style="font-size:15px;font-weight:700;color:#111111;overflow-wrap:anywhere;">Pimcore</span>
  </span>
  <span style="font-size:12px;font-weight:500;color:#516271;">Independent review on Should I Use It</span>
</a>

Text link

<a href="https://shouldiuse.io/r/pimcore">Pimcore review on Should I Use It: Depends</a>

Paste one snippet. Keep the link as it is. A nofollow tag stops search engines from following it.

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

No comments yet.

Categories

Pimcore Review

Confidence

Ratings

Pricing