All packages
picu vulnerabilities
3 known CVE vulnerabilities in picu, translated and rated.
- CVE-2026-104406High
picu plugin in versions up to and including 3.10.1 contains a Broken Access Control vulnerability exploitable by an unauthenticated attacker.
- CVE-2026-104395High
picu plugin in versions up to and including 3.10.1 contains a Cross Site Scripting (XSS) vulnerability exploitable by an unauthenticated attacker.
- CVE-2026-57387High
The picu WordPress plugin is vulnerable to Stored Cross-Site Scripting (XSS) due to improper input neutralization during page generation. This affects all versions up to and including 3.5.1.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS