VK All in One Expansion Unit

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Modeled within the band wp.org reports; tightens as we track daily.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. The recent download trend is too spiky to read.

Recent releases and news for this plugin

1. — Version 9.118.0 [ New Feature ][ SNS Share Button ] Added a Threads share button, with a show / hide toggle under ExUnit > Main Setting. [ Spec Change ] Update vektor-inc/font-awesome-versions from 0.7.2 to 0.7.4 [ Bug Fix ][ Widget ] F 9.118.0
2. — Version 9.117.5 [ Bug Fix ][ Widget ] Added show_instance_in_rest to the ExUnit classic widgets so their settings are kept inline in the block-based widgets editor, preventing them from being hidden when reference widget resolution fail 9.117.5
3. — Version 9.117.4 [ Bug Fix ][ Widget ] Fixed PHP 8.x warnings that were written to the error log when saving the Profile widget or the PR Blocks widget with certain settings. 9.117.4
4. — Version 9.117.3 [ Bug Fix ][ Setting Page ] Updated the shared admin component so that the setting screen styles and scripts are reloaded reliably after an update instead of being served from the cache, and so that the left side navigat 9.117.3
5. — Version 9.117.2 [ Bug Fix ] Fixed a warning in the article structured data output when the author user could not be retrieved. [ Bug Fix ] Fixed an “Array to string conversion” PHP warning and an invalid “post-type-Array” body class tha 9.117.2
6. — Version 9.117.1 [ Bug Fix ] Removed an unnecessary veu_get_common_options() call in vwu_register_css() that could trigger a “Call to undefined function” fatal error when the enqueue hooks ran before the packages were loaded in some envi 9.117.1

11 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 6.4 VK All in One Expansion Unit <= 9.113.3 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2026-03-23 CVE-2026-39483 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 9.113.3 Patched in 9.113.4
2. Medium · 6.4 VK All in One Expansion Unit <= 9.112.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via SNS Title ↗
   2026-02-17 CVE-2025-11737 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 9.112.3 Patched in 9.112.4
3. Medium · 6.4 VK All in One Expansion Unit <= 9.112.1 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2025-11-17 CVE-2025-11267 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) Affects <= 9.112.1 Patched in 9.112.2
4. Medium · 6.4 VK All in One Expansion Unit <= 9.112.1 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2025-11-17 CVE-2025-11265 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) Affects <= 9.112.1 Patched in 9.112.2
5. Medium · 6.4 VK All in One Expansion Unit <= 9.99.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2024-07-10 CVE-2024-37956 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 9.99.1.0 Patched in 9.99.2.0
6. Medium · 6.5 VK All in One Expansion Unit <= 9.95.0.1 - Information Exposure ↗
   2024-03-26 CVE-2024-2093 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 9.95.0.1 Patched in 9.96.0.0
7. Medium · 6.4 VK All in One Expansion Unit <= 9.96.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via className ↗
   2024-03-25 CVE-2024-2170 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 9.96.0.1 Patched in 9.97.0.0
8. Medium · 6.4 VK All in One Expansion Unit <= 9.88.1.0 - Stored (Contributor+) Cross-Site Scripting in CTA Post ↗
   2023-05-09 CVE-2023-28367 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 9.88.1.0 Patched in 9.88.2.0
9. Medium · 6.4 VK All in One Expansion Unit <= 9.88.1.0 - Stored (Contributor+) Cross-Site Scripting in Profile Setting ↗
   2023-05-09 CVE-2023-27926 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 9.88.1.0 Patched in 9.88.2.0
10. Medium · 4.7 VK All in One Expansion Unit <= 9.87.0.1 - Reflected Cross-Site Scripting via REQUEST_URI ↗
    2023-02-22 CVE-2023-0937 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 9.87.0.1 Patched in 9.87.1.0
11. Medium · 6.4 VK All in One Expansion Unit <= 9.85.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode ↗
    2023-02-03 CVE-2023-0230 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 9.85.0.1 Patched in 9.86.0.0

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Translated into 9 languages, 3 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

No tier crossings observed yet.

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• MonsterInsights – Google Analytics Dashboard for WordPress (Website Stats Made Easy) 2M+ installs · 4.5★ · 1 shared tag A
• GTM4WP – A Google Tag Manager (GTM) plugin for WordPress 700K+ installs · 4.5★ · 1 shared tag B
• WP Statistics – Simple, privacy-friendly Google Analytics alternative 600K+ installs · 4.1★ · 1 shared tag A
• GA Google Analytics – Connect Google Analytics to WordPress 400K+ installs · 4.8★ · 1 shared tag A
• ExactMetrics – Google Analytics Dashboard for WordPress (Website Stats Plugin) 300K+ installs · 2.5★ · 1 shared tag B
• Insert Headers And Footers 300K+ installs · 4.9★ · 1 shared tag A

Embed this report card

Drop a live Pulse card for VK All in One Expansion Unit into a readme, a review or a deck. It updates itself.

VK All in One Expansion Unit: 100K+ active installs, 4.0★ (7 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/vk-all-in-one-expansion-unit