https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-27T20:09:11.883799+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-201090 EUVD-2026-201090 2026-10-27T20:09:11.886545+00:00 EUVD-2026-201090 https://cve.radiocsirt.org/vuln/fkie_cve-2024-52268 fkie_cve-2024-52268 2026-10-27T20:09:11.886595+00:00

Cross-site scripting vulnerability exists in VK All in One Expansion Unit versions prior to 9.100.1.0. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is accessing the web site using the product.

 https://cve.radiocsirt.org/vuln/ghsa-mh3p-j9c3-vqpj GHSA-mh3p-j9c3-vqpj 2026-10-27T20:09:11.886624+00:00

Cross-site scripting vulnerability exists in VK All in One Expansion Unit versions prior to 9.100.1.0. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is accessing the web site using the product.

 https://cve.radiocsirt.org/vuln/jvndb-2024-000118 jvndb-2024-000118 2026-10-27T20:09:11.886641+00:00

"Custom Alert Content" of WordPress Plugin "VK All in One Expansion Unit" provided by Vektor,Inc. contains a stored cross-site scripting vulnerability (CWE-79). Umeda Yuugo of Tokyo Denki University reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.