Vulnerability index

Browse CVEs

11 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Vk All In One Expansion Unit MEDIUM 5.4
CVE-2024-37956

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Vektor,Inc. VK All in One Expansion Unit…

Fix: 9.99.2.0+
Fix from $1,600 2024-07-20
Vk All In One Expansion Unit MEDIUM 5.3
CVE-2024-2093

The VK All in One Expansion Unit plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 9.95.0.1 …

Fix: 9.96.0.0+
Fix from $1,600 2024-04-09
Vk All In One Expansion Unit MEDIUM 5.4
CVE-2024-2170

The VK All in One Expansion Unit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the child page index widget in all versions up…

Fix: 9.97.0.0+
Fix from $1,600 2024-03-26
Vk Blocks MEDIUM 5.4
CVE-2023-5706

The VK Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'vk-blocks/ancestor-page-list' block in all versions…

Fix: after 1.63.0.1
Fix from $1,600 2023-11-22
Vk Filter Search MEDIUM 5.4
CVE-2023-5705

The VK Filter Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'vk_filter_search' shortcode in all versions …

Fix: after 2.3.1
Fix from $1,600 2023-10-27
Vk All In One Expansion Unit MEDIUM 5.4
CVE-2023-27926

Cross-site scripting vulnerability in Profile setting function of VK All in One Expansion Unit 9.88.1.0 and earlier allows a remote authenticated att…

Fix: 9.88.2.0+
Fix from $1,600 2023-05-23
Vk All In One Expansion Unit MEDIUM 5.4
CVE-2023-28367

Cross-site scripting vulnerability in CTA post function of VK All in One Expansion Unit 9.88.1.0 and earlier allows a remote authenticated attacker t…

Fix: 9.88.2.0+
Fix from $1,600 2023-05-23
Vk Blocks MEDIUM 5.4
CVE-2023-27923

Cross-site scripting vulnerability in Tag edit function of VK Blocks 1.53.0.1 and earlier and VK Blocks Pro 1.53.0.1 and earlier allows a remote auth…

Fix: 1.53.0.1+
Fix from $1,600 2023-05-23
Vk Blocks MEDIUM 5.4
CVE-2023-27925

Cross-site scripting vulnerability in Post function of VK Blocks 1.53.0.1 and earlier and VK Blocks Pro 1.53.0.1 and earlier allows a remote authenti…

Fix: 1.53.0.1+
Fix from $1,600 2023-05-23
Vk All In One Expansion Unit MEDIUM 6.1
CVE-2023-0937

The VK All in One Expansion Unit WordPress plugin before 9.87.1.0 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in …

Fix: 9.87.1.0+
Fix from $1,600 2023-03-20
Vk All In One Expansion Unit MEDIUM 5.4
CVE-2023-0230

The VK All in One Expansion Unit WordPress plugin before 9.86.0.0 does not validate and escape some of its block options before outputting them back …

Fix: 9.86.0.0+
Fix from $1,600 2023-02-27