VK All in One Expansion Unit
VK All in One Expansion Unit has 11 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2026; all 11 are fixed as of September 2026. Their average CVSS score is 6.3, and the most serious one scores 6.5 out of 10. 2023 was the busiest year with 4 disclosures.
The most common weakness is Cross-Site Scripting, behind 8 of the records (73%). Other recurring categories include Improper Neutralization Of Script-Related HTML Tags In A Web Page (Basic XSS), Exposure Of Sensitive Information To An Unauthorized Actor.
Every one of the 11 issues recorded for VK All in One Expansion Unit has a vendor fix available, so running the current release closes all known holes.
9 independent researchers contributed these findings, most of them (2) reported by apple502j. VK All in One Expansion Unit is installed on roughly 100,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
CVE-2024-2093VK All in One Expansion Unit <= 9.95.0.1 - Information Exposure
Read the full analysisVulnerability Records
VK All in One Expansion Unit
Author
Hidekazu Ishikawa
This plug-in is an integrated plug-in with a variety of features that make it powerful your web site. Many features can be stopped individually. [ Powerful Widgets ] Recent Posts – display the link text and the date of the latest article title. Page content to widget – display the contents of the page to the widgets. Profile – display the profile entered in the widget. FB Page Plugin – display the Facebook Page Plugin. 3PR area – display the 3PR area. PR Blocks – display the PR Blocks. Categories/tags list – Displays a categories, tags or format list. Archive list – Displays a list of archives. You can choose the post type and also to display archives by month or by year. Facebook Page Plugin widget Image Banner widget Text Button widget Contact Button widget [ Gutenberg Blocks ] HTML SiteMap Child Page List Page list from ancestor Share Button Contact Section [ Social media ] Print Social Bookmarks Print OG Tags Print X Card Tags [ Others ] Print Google Analytics tag Print meta description tag Rewrite the title tag Insert Related Posts Insert Call to action Insert Child page List to page Insert Page list from ancestor Insert Auto HTML Site Map Automatic Eye Catch insert Custom post type and custom taxonomy manager and more. Credits This plugin’s share button icons (Facebook, X, Bluesky, Threads, Hatena Bookmark, LINE, Copy) are inline SVG traced from the following third-party icon sets: Facebook, X, Bluesky, Threads, Hatena Bookmark and LINE icons: Simple Icons ( https://simpleicons.org/ ), licensed under CC0 1.0 Universal. Copy icon: Heroicons ( https://heroicons.com/ ), square-2-stack (solid), licensed under the MIT License. Full license texts are included in LICENSE-THIRD-PARTY.txt, bundled with this plugin.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C