VK All in One Expansion Unit

Vulnerabilities 16Slug vk-all-in-one-expansion-unitLatest version 9.115.0WordPress.org →

Minimum safe version

9.113.4

Update to 9.113.4 or later to address 16 fixable vulnerabilities

Latest available9.115.0 ✓
Medium 6.5
2026-04-08< 9.113.4

CVE-2026-39483

CVEWordfence
Medium 6.4
2026-02-18< 9.112.4

CVE-2025-11737

CVEWordfence
Medium 6.4
2025-11-18< 9.112.2

CVE-2025-11265

CVEWordfence
Medium 6.4
2025-11-18< 9.112.2

CVE-2025-11267

CVEWordfence
Medium 4.8
2024-11-13< 9.100.1.0

CVE-2024-52268

CVEJVN
Medium 5.4
2023-05-23< 9.88.2.0

CVE-2023-28367

CVE
N/A
2023-05-09< 9.88.2.0

WordPress Plugin "VK Blocks" and "VK All in One Expansion Unit" vulnerable to cross-site scripting

JVN
Medium 5.4
2023-05-23< 9.88.2.0

CVE-2023-27926

CVE
Medium 6.1
2023-03-20< 9.87.1.0

CVE-2023-0937

CVEWPScan
N/A
2023-02-23< 9.87.1.0

WordPress VK All in One Expansion Unit Plugin <= 9.87.0.1 is vulnerable to Cross Site Scripting (XSS)

Patchstack
N/A
2023-02-22< 9.87.1.0

VK All in One Expansion Unit <= 9.87.0.1 - Reflected Cross-Site Scripting via REQUEST_URI

Wordfence
Medium 5.4
2023-02-28< 9.86.0.0

WordPress VK All in One Expansion Unit Plugin < 9.86.0.0 is vulnerable to Cross Site Scripting (XSS)

PatchstackCVEWordfenceWPScan