Browse CVEs

MEDIUM 5.4 CVE-2024-37956 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Vektor,Inc. VK All in One Expansion Unit… Vk All In One Expansion Unit 9.99.2.0+ Fix from $1,6002024-07-20 MEDIUM 5.3 CVE-2024-2093 The VK All in One Expansion Unit plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 9.95.0.1 … Vk All In One Expansion Unit 9.96.0.0+ Fix from $1,6002024-04-09 MEDIUM 5.4 CVE-2024-2170 The VK All in One Expansion Unit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the child page index widget in all versions up… Vk All In One Expansion Unit 9.97.0.0+ Fix from $1,6002024-03-26 MEDIUM 5.4 CVE-2023-5706 The VK Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'vk-blocks/ancestor-page-list' block in all versions… Vk Blocks after 1.63.0.1 Fix from $1,6002023-11-22 MEDIUM 5.4 CVE-2023-5705 The VK Filter Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'vk_filter_search' shortcode in all versions … Vk Filter Search after 2.3.1 Fix from $1,6002023-10-27 MEDIUM 5.4 CVE-2023-27926 Cross-site scripting vulnerability in Profile setting function of VK All in One Expansion Unit 9.88.1.0 and earlier allows a remote authenticated att… Vk All In One Expansion Unit 9.88.2.0+ Fix from $1,6002023-05-23 MEDIUM 5.4 CVE-2023-28367 Cross-site scripting vulnerability in CTA post function of VK All in One Expansion Unit 9.88.1.0 and earlier allows a remote authenticated attacker t… Vk All In One Expansion Unit 9.88.2.0+ Fix from $1,6002023-05-23 MEDIUM 5.4 CVE-2023-27923 Cross-site scripting vulnerability in Tag edit function of VK Blocks 1.53.0.1 and earlier and VK Blocks Pro 1.53.0.1 and earlier allows a remote auth… Vk Blocks 1.53.0.1+ Fix from $1,6002023-05-23 MEDIUM 5.4 CVE-2023-27925 Cross-site scripting vulnerability in Post function of VK Blocks 1.53.0.1 and earlier and VK Blocks Pro 1.53.0.1 and earlier allows a remote authenti… Vk Blocks 1.53.0.1+ Fix from $1,6002023-05-23 MEDIUM 6.1 CVE-2023-0937 The VK All in One Expansion Unit WordPress plugin before 9.87.1.0 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in … Vk All In One Expansion Unit 9.87.1.0+ Fix from $1,6002023-03-20 MEDIUM 5.4 CVE-2023-0230 The VK All in One Expansion Unit WordPress plugin before 9.86.0.0 does not validate and escape some of its block options before outputting them back … Vk All In One Expansion Unit 9.86.0.0+ Fix from $1,6002023-02-27