kurudrive

Products

ProductCVEsExploitedLatest
VK All in One Expansion Unit6–Sep 18, 2026

Exploited and recent CVEs

  • CVE-2026-17586 Medium 6.4 VK All in One Expansion Unit <= 9.118.0 - Authenticated (Author+) Stored Cross-Site Scripting via 'vkExUnit_cta_img_position' Post Meta 0.4%
  • CVE-2025-11737 Medium 6.4 VK All in One Expansion Unit <= 9.112.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via SNS Title 0.2%
  • CVE-2025-11265 Medium 6.4 VK All in One Expansion Unit <= 9.112.1 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.2%
  • CVE-2025-11267 Medium 6.4 VK All in One Expansion Unit <= 9.112.1 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.2%
  • CVE-2024-2093 Medium 6.5 VK All in One Expansion Unit <= 9.95.0.1 - Information Exposure 0.7%
  • CVE-2024-2170 Medium 6.4 VK All in One Expansion Unit <= 9.96.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via className 0.3%