Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
vk-all-in-one-expansion-unit
WordPress
· Plugin
12 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
VK All in One Expansion Unit <= 9.118.0 - Authenticated (Author+) Stored Cross-Site Scripting via 'vkExUnit_cta_img_position' Post Meta
CVE-2026-17586
vk-all-in-one-expansion-unit
WordPress
Medium
Fix reported
2026-09-18
VK All in One Expansion Unit <= 9.112.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via SNS Title
CVE-2025-11737
vk-all-in-one-expansion-unit
WordPress
Medium
Fix reported
2026-05-12
VK All in One Expansion Unit <= 9.113.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2026-39483
vk-all-in-one-expansion-unit
WordPress
Medium
Fix reported
2026-04-16
VK All in One Expansion Unit <= 9.112.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-11265
vk-all-in-one-expansion-unit
WordPress
Medium
Fix reported
2025-11-18
VK All in One Expansion Unit <= 9.112.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-11267
vk-all-in-one-expansion-unit
WordPress
Medium
Fix reported
2025-11-18
VK All in One Expansion Unit <= 9.99.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-37956
vk-all-in-one-expansion-unit
WordPress
Medium
Fix reported
2024-09-05
VK All in One Expansion Unit <= 9.95.0.1 - Information Exposure
CVE-2024-2093
vk-all-in-one-expansion-unit
WordPress
Medium
Fix reported
2024-04-09
VK All in One Expansion Unit <= 9.96.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via className
CVE-2024-2170
vk-all-in-one-expansion-unit
WordPress
Medium
Fix reported
2024-03-26
VK All in One Expansion Unit <= 9.85.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2023-0230
vk-all-in-one-expansion-unit
WordPress
Medium
Fix reported
2024-01-22
VK All in One Expansion Unit <= 9.88.1.0 - Stored (Contributor+) Cross-Site Scripting in Profile Setting
CVE-2023-27926
vk-all-in-one-expansion-unit
WordPress
Medium
Fix reported
2024-01-22
VK All in One Expansion Unit <= 9.87.0.1 - Reflected Cross-Site Scripting via REQUEST_URI
CVE-2023-0937
vk-all-in-one-expansion-unit
WordPress
Medium
Fix reported
2024-01-22
VK All in One Expansion Unit <= 9.88.1.0 - Stored (Contributor+) Cross-Site Scripting in CTA Post
CVE-2023-28367
vk-all-in-one-expansion-unit
WordPress
Medium
Fix reported
2024-01-22