What’s Vulnerable › Products
kurudrive VK All in One Expansion Unit vulnerabilities
12 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.
Check whether your kurudrive VK All in One Expansion Unit version is affected
Latest kurudrive VK All in One Expansion Unit vulnerabilities
- CVE-2026-17586 — VK All in One Expansion Unit <= 9.118.0 - Authenticated (Author+) Stored Cross-Site Scripting via 'vkExUnit_cta_img_position' Post Meta (CVSS 6.4)
- CVE-2025-11737 — VK All in One Expansion Unit <= 9.112.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via SNS Title (CVSS 6.4)
- CVE-2025-11267 — VK All in One Expansion Unit <= 9.112.1 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4)
- CVE-2025-11265 — VK All in One Expansion Unit <= 9.112.1 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4)
- CVE-2024-52268 — (CVSS 4.8)
- CVE-2024-37956 — WordPress VK All in One Expansion Unit plugin <= 9.99.1.0 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)
- CVE-2024-2093 — VK All in One Expansion Unit <= 9.95.0.1 - Information Exposure (CVSS 5.3)
- CVE-2024-2170 — VK All in One Expansion Unit <= 9.96.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via className (CVSS 5.4)
- CVE-2023-28367 — (CVSS 5.4)
- CVE-2023-27926 — (CVSS 5.4)
- CVE-2023-0937 — VK All in One Expansion Unit < 9.87.1.0 - Reflected XSS (CVSS 6.1)
- CVE-2023-0230 — VK All in One Expansion Unit < 9.86.0.0 - Contributor+ Stored XSS (CVSS 5.4)