Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: picu Clear all filters
TI-2026-68293 CVE-2026-104406 · GHSA-4qhg-9xvf-2433

Broken access control in WordPress picu plugin

Priority LOW 38

Unauthenticated Broken Access Control in picu <= 3.10.1 versions.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00288 Published 2026-10-06 No fix listed CWE-862
TI-2026-68290 CVE-2026-104395 · GHSA-34f2-qxrc-2c85

Cross-site scripting in WordPress picu plugin

Priority LOW 31

Unauthenticated Cross Site Scripting (XSS) in picu <= 3.10.1 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0023 Published 2026-10-06 No fix listed CWE-79
TI-2026-41324 CVE-2026-57387 · GHSA-qw2m-xrxx-675c

WordPress picu plugin <= 3.5.1 - Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in picu picu picu allows Stored XSS.This issue affects picu: from n/a through <= 3.5.1.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00251 Published 2026-07-13 No fix listed CWE-79