Read the docs

picu

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

picu records in CISA KEV

No picu vulnerabilities are listed in CISA KEV.

Records

4 records

TI-2026-68293 CVE-2026-104406 · GHSA-4qhg-9xvf-2433

Broken access control in WordPress picu plugin

Priority LOW 38

Unauthenticated Broken Access Control in picu <= 3.10.1 versions.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00288 Published 2026-10-06 No fix listed CWE-862
TI-2026-68290 CVE-2026-104395 · GHSA-34f2-qxrc-2c85

Cross-site scripting in WordPress picu plugin

Priority LOW 31

Unauthenticated Cross Site Scripting (XSS) in picu <= 3.10.1 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0023 Published 2026-10-06 No fix listed CWE-79
TI-2026-41324 CVE-2026-57387 · GHSA-qw2m-xrxx-675c

WordPress picu plugin <= 3.5.1 - Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in picu picu picu allows Stored XSS.This issue affects picu: from n/a through <= 3.5.1.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00251 Published 2026-07-13 No fix listed CWE-79
Open these records in search →