Vektor,Inc.
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| VK All in One Expansion Unit | 4 | – | Nov 13, 2024 |
| VK Blocks and VK Blocks Pro | 2 | – | May 23, 2023 |
| VK Block Patterns | 1 | – | Apr 26, 2024 |
| VK Filter Search | 1 | – | Apr 4, 2025 |
| VK Google Job Posting Manager | 1 | – | Dec 16, 2025 |
Exploited and recent CVEs
- CVE-2025-68070 WordPress VK Google Job Posting Manager plugin <= 1.2.22 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2025-32175 WordPress VK Filter Search plugin <= 2.20.2 - Cross Site Scripting (XSS) vulnerability 0.4%
- CVE-2024-52268 Cross-site scripting vulnerability exists in VK All in One Expansion Unit versions prior to 9.100.1.0. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the 0.3%
- CVE-2024-37956 WordPress VK All in One Expansion Unit plugin <= 9.99.1.0 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2024-32826 WordPress VK Block Patterns plugin <= 1.31.0 - Broken Access Control vulnerability 0.4%
- CVE-2023-27925 Cross-site scripting vulnerability in Post function of VK Blocks 1.53.0.1 and earlier and VK Blocks Pro 1.53.0.1 and earlier allows a remote authenticated attacker to inject an arbitrary script. 0.6%
- CVE-2023-27923 Cross-site scripting vulnerability in Tag edit function of VK Blocks 1.53.0.1 and earlier and VK Blocks Pro 1.53.0.1 and earlier allows a remote authenticated attacker to inject an arbitrary script. 0.6%
- CVE-2023-28367 Cross-site scripting vulnerability in CTA post function of VK All in One Expansion Unit 9.88.1.0 and earlier allows a remote authenticated attacker to inject an arbitrary script. 0.6%
- CVE-2023-27926 Cross-site scripting vulnerability in Profile setting function of VK All in One Expansion Unit 9.88.1.0 and earlier allows a remote authenticated attacker to inject an arbitrary script. 0.6%