Vektor Inc.
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| VK Blocks | 5 | – | Oct 15, 2026 |
| VK Google Job Posting Manager | 2 | – | Oct 5, 2026 |
| VK Block Patterns | 1 | – | Jan 20, 2024 |
| VK Filter Search | 1 | – | Oct 27, 2023 |
Exploited and recent CVEs
- CVE-2026-78087 VK Blocks <= 1.126.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Group Block 'linkToPost' Feature 0.2%
- CVE-2026-100511 WordPress VK Google Job Posting Manager plugin <= 1.3.1 - PHP Object Injection vulnerability 0.3%
- CVE-2025-12836 VK Google Job Posting Manager <= 1.2.23 - Authenticated (Author+) Stored Cross-Site Scripting via Job Description Field 0.3%
- CVE-2024-13635 VK Blocks <= 1.94.2.2 - Missing Authorization to Sensitive Information Exposure 0.3%
- CVE-2024-0623 VK Block Patterns <= 1.31.1.1 - Cross-Site Request Forgery 0.7%
- CVE-2023-5706 VK Blocks <= 1.63.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block 0.6%
- CVE-2023-5705 VK Filter Search <= 2.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.5%
- CVE-2023-0584 VK Blocks <= 1.57.0.5 - Authenticated(Contributor+) Settings Update 0.5%
- CVE-2023-0583 VK Blocks <= 1.57.0.5 - Authenticated(Contributor+) Settings Update 0.5%