CVE-2024-37956

Description

References

• patchstack.com/database/vulnerability/vk-all-in-one-expansion-unit/wordpress-vk-all-in-one-expansion-unit-plugin-9-97-2-1-cross-site-scripting-xss-vulnerability · Third Party Advisory

More vulnerabilities in vk all in one expansion unit

• CVE-2024-52268MEDIUM 4.8Cross-site scripting vulnerability exists in VK All in One Expansion Unit versions prior to 9.100.1.0. If this vulnerability is exploited, a…
• CVE-2024-2093MEDIUM 5.3The VK All in One Expansion Unit plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, …
• CVE-2024-2170MEDIUM 5.4The VK All in One Expansion Unit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the child page index widget in all ve…
• CVE-2023-28367MEDIUM 5.4Cross-site scripting vulnerability in CTA post function of VK All in One Expansion Unit 9.88.1.0 and earlier allows a remote authenticated a…
• CVE-2023-27926MEDIUM 5.4Cross-site scripting vulnerability in Profile setting function of VK All in One Expansion Unit 9.88.1.0 and earlier allows a remote authenti…