vk_all_in_one_expansion_unit vulnerabilities

CVEs whose affected-version data names the vk_all_in_one_expansion_unit package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-17586Medium· 6.4

1w ago

The VK All in One Expansion Unit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'vkExUnit_cta_img_position' Post Meta in all versions up to, and including, 9.118.0 due to insufficient input sanitization and output …

The VK All in One Expansion Unit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'vkExUnit_cta_img_position' Post Meta in all versions up to, and including, 9.118.0 due to insufficient input sanitization and output …

▾ Sunlitkurudrive · VK All in One Expansion UnitEPSS 0.31%via NVD