Vulnerabilities in Vektor,Inc.
9 resultsCVE-2023-28367MEDIUMCross-site scripting vulnerability in CTA post function of VK All in One Expansion Unit 9.88.1.0 and earlier allows a remote authenticated aEPSS 0.6%CVE-2023-27923MEDIUMCross-site scripting vulnerability in Tag edit function of VK Blocks 1.53.0.1 and earlier and VK Blocks Pro 1.53.0.1 and earlier allows a reEPSS 0.6%CVE-2023-27926MEDIUMCross-site scripting vulnerability in Profile setting function of VK All in One Expansion Unit 9.88.1.0 and earlier allows a remote authentiEPSS 0.6%CVE-2023-27925MEDIUMCross-site scripting vulnerability in Post function of VK Blocks 1.53.0.1 and earlier and VK Blocks Pro 1.53.0.1 and earlier allows a remoteEPSS 0.6%CVE-2024-32826MEDIUMWordPress VK Block Patterns plugin <= 1.31.0 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2025-32175MEDIUMWordPress VK Filter Search plugin <= 2.20.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-37956MEDIUMWordPress VK All in One Expansion Unit plugin <= 9.99.1.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-52268MEDIUMCross-site scripting vulnerability exists in VK All in One Expansion Unit versions prior to 9.100.1.0. If this vulnerability is exploited, aEPSS 0.3%CVE-2025-68070MEDIUMWordPress VK Google Job Posting Manager plugin <= 1.2.22 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%