kurudrive
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| VK All in One Expansion Unit | 6 | – | Sep 18, 2026 |
Exploited and recent CVEs
- CVE-2026-17586 VK All in One Expansion Unit <= 9.118.0 - Authenticated (Author+) Stored Cross-Site Scripting via 'vkExUnit_cta_img_position' Post Meta 0.4%
- CVE-2025-11737 VK All in One Expansion Unit <= 9.112.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via SNS Title 0.2%
- CVE-2025-11265 VK All in One Expansion Unit <= 9.112.1 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.2%
- CVE-2025-11267 VK All in One Expansion Unit <= 9.112.1 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.2%
- CVE-2024-2093 VK All in One Expansion Unit <= 9.95.0.1 - Information Exposure 0.7%
- CVE-2024-2170 VK All in One Expansion Unit <= 9.96.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via className 0.3%