CVE-2026-104406

Unauthenticated Broken Access Control in picu = 3.10.1 versions...

CVE-2026-104395

Unauthenticated Cross Site Scripting XSS in picu = 3.10.1 versions...

CVE-2026-104406 WordPress picu plugin <= 3.10.1 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in picu = 3.10.1 versions...

EUVD-2026-93077

Unauthenticated Broken Access Control in picu = 3.10.1 versions...

CVE-2026-104406

The WordPress picu plugin (versions

CVE-2026-104406 WordPress picu plugin <= 3.10.1 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in picu = 3.10.1 versions...

EUVD-2026-93075

Unauthenticated Cross Site Scripting XSS in picu = 3.10.1 versions...

CVE-2026-104395 WordPress picu plugin <= 3.10.1 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in picu = 3.10.1 versions...

CVE-2026-104395 WordPress picu plugin <= 3.10.1 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in picu = 3.10.1 versions...

CVE-2026-104395

The WordPress picu plugin versions

CVE-2026-104395: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in picu = 3.10.1 versions...

CVE-2026-104406: Missing Authorization

Unauthenticated Broken Access Control in picu = 3.10.1 versions...

PT-2026-106374

Unauthenticated Cross Site Scripting XSS in picu = 3.10.1 versions...

PT-2026-106377

Unauthenticated Broken Access Control in picu = 3.10.1 versions...

WordPress picu plugin <= 3.10.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Intrudify in WordPress Plugin picu versions = 3.10.1...

WordPress picu plugin <= 3.10.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Intrudify in WordPress Plugin picu versions = 3.10.1...

EUVD-2026-43460

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in picu picu picu allows Stored XSS.This issue affects picu: from n/a through = 3.5.1...

CVE-2026-57387

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in picu picu picu allows Stored XSS.This issue affects picu: from n/a through = 3.5.1...

CVE-2026-57387 WordPress picu plugin <= 3.5.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in picu picu picu allows Stored XSS.This issue affects picu: from n/a through = 3.5.1...

CVE-2026-57387

CVE-2026-57387 is a Stored Cross-Site Scripting (XSS) vulnerability in the WordPress plugin picu (versions up to and including 3.5.1). The issue arises from improper neutralization of input during web page generation, enabling an attacker to inject malicious scripts that are stored and later rend...