WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
vk-all-in-one-expansion-unit
Published
2024-03-25
Title
VK All in One Expansion Unit < 9.97.0.0 - Contributor+ Stored XSS
Slug
vk-all-in-one-expansion-unit
Published
2024-03-26
Title
VK All in One Expansion Unit < 9.96.0.0 - Unauthenticated Password Protected Content Access
Slug
vk-all-in-one-expansion-unit
Published
2024-07-10
Title
VK All in One Expansion Unit < 9.99.2.0 - Contributor+ Stored XSS
Slug
vk-all-in-one-expansion-unit
Published
2025-11-17
Title
VK All in One Expansion Unit < 9.112.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
vk-all-in-one-expansion-unit
Published
2025-11-17
Title
VK All in One Expansion Unit < 9.112.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
vk-all-in-one-expansion-unit
Published
2026-02-17
Title
VK All in One Expansion Unit < 9.112.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via SNS Title
Slug
vk-all-in-one-expansion-unit
Published
2026-03-23
Title
VK All in One Expansion Unit < 9.113.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
vk-block-patterns
Published
2024-01-19
Title
VK Block Patterns < 1.31.2.0 - Cross-Site Request Forgery
Slug
vk-block-patterns
Published
2024-04-22
Title
VK Block Patterns < 1.31.1.1 - Missing Authorization
Slug
vk-blocks
Published
2023-05-09
Title
VK Blocks < 1.54.0 - Multiple Stored XSS
Slug
vk-blocks
Published
2023-06-02
Title
VK Blocks < 1.57.1.0 - Contributor+ Settings Update via REST API
Slug
vk-blocks
Published
2023-06-02
Title
VK Blocks < 1.58.0.0 - Contributor+ Settings Update via REST API
Slug
vk-blocks
Published
2023-10-24
Title
VK Blocks < 1.64.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block
Slug
vk-blocks
Published
2025-03-06
Title
VK Blocks < 1.95.0.3 - Missing Authorization to Sensitive Information Exposure
Slug
vk-blocks-pro
Published
2023-05-09
Title
VK Blocks < 1.54.0 - Multiple Stored XSS
Slug
vk-filter-search
Published
2023-10-25
Title
VK Filter Search < 2.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
vk-filter-search
Published
2025-04-04
Title
VK Filter Search <= 2.18.3.0 - Contributor+ Stored XSS
Slug
vk-gallery
Published
2014-08-01
Title
Vk Gallery 1.1.0 - Shell Upload
Slug
vk-google-job-posting-manager
Published
2025-12-15
Title
VK Google Job Posting Manager < 1.2.23 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
vk-google-job-posting-manager
Published
2026-01-23
Title
VK Google Job Posting Manager < 1.2.24 - Authenticated (Author+) Stored Cross-Site Scripting via Job Description Field
Slug
vk-poster-group
Published
2024-02-09
Title
VK Poster Group <= 2.0.3 - Reflected Cross-Site Scripting via vkp_repost
Slug
vkontakte-api
Published
2014-08-01
Title
vkontakte-api - vkontakte-api/swf/tagcloud.swf tagcloud Parameter XSS
Slug
vkontakte-cross-post
Published
2025-04-09
Title
VKontakte Cross-Post <= 0.3.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
vkontakte-wall-post
Published
2024-10-15
Title
VKontakte Wall Post <= 2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
vm-backups
Published
2021-03-13
Title
VM Backups <= 1.0 - CSRF to Database Backup Download