CVEs published in April 2024
3,718 vulnerabilities, 293 critical, 10 exploited.
- adobe illustratorAdobe Illustrator 2024 GIF file parsing Out-Of-Bound Write remote code execution vulnerabiity7.8 High
- adobe illustratorAdobe Illustrator 2024 PS file Parsing Stack based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar improper certificate validation5.9 Medium
- pickplugins post grid, unknown post grid, form maker, popup maker, woocommerce blocks, post blocks, post carousel +1 moreCombo Blocks < 2.2.76 - Unauthenticated Password Protected Posts Access5.4 Medium
- elextensions elex woocommerce dynamic pricing and discountsWordPress ELEX WooCommerce Dynamic Pricing and Discounts plugin <= 2.1.2 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- smartersite wp compress – image optimizer [all-in-one], wp compress – image optimizer [all-in-one], wpcompress wp compress +2 moreWordPress WP Compress plugin <= 6.10.35 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- daman jeet finale lite, xlplugins finale +1 moreWordPress Finale Lite plugin <= 2.18.0 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- stephanie leary convert post typesWordPress Convert Post Types plugin <= 1.4 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- julien berthelot / mpembed.com wp matterport shortcodeWordPress WP Matterport Shortcode plugin <= 2.1.9 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- varun kumar easy logoWordPress Easy Logo plugin <= 1.9.3 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- bunny.netWordPress bunny.net plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- ays pro popup like box, popup likebox team like box +1 moreWordPress Popup Likebox plugin <= 3.7.2 - Cross-Site Scripting (XSS) vulnerability5.9 Medium
- faktor vier f4 improvementsWordPress F4 Improvements plugin <= 1.8.0 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- bracketspace advanced cron manager – debug & controlWordPress Advanced Cron Manager – debug & control plugin <= 2.5.2 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- aminur islam wp login and logout redirectWordPress WP Login and Logout Redirect plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- pluginops top barWordPress Top Bar plugin <= 3.0.5 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- iain poulson intagrate liteWordPress Intagrate Lite plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- pdfcrowd save as pdf plugin by pdfcrowdWordPress Save as PDF by Pdfcrowd plugin <= 3.2.1 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- save as image plugin by pdfcrowdWordPress Save as Image plugin by Pdfcrowd plugin <= 3.2.1 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- creativethemes blocksy companionWordPress Blocksy Companion plugin <= 2.0.28 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
microcode_ctlTuxCareUpdate of microcode_ctlNo score- link whisper free, unknown link whisper free +1 moreWordPress Link Whisper Free plugin <= 0.6.9 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- bracketspace simple post notesWordPress Simple Post Notes plugin <= 1.7.6 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- ayecode ltd userswpWordPress UsersWP plugin < 1.2.6 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- visitor analytics twipla (visitor analytics io)WordPress TWIPLA (Visitor Analytics IO) plugin <= 1.2.0 - Cross-Site Scripting (XSS) vulnerability5.9 Medium
- tomas wordpress tooltipsWordPress WordPress Tooltips plugin <= 9.5.3 - Cross Site Request Forgery (CSRF) vulnerability7.1 High
- leadinfoWordPress Leadinfo plugin <= 1.0 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- alex tselegidis easy!appointments, easyappointments easy\!appointments +1 moreWordPress Easy!Appointments plugin <= 1.3.3 - Arbitrary File Deletion vulnerability6.3 Medium
squidUbuntusquid regressionNo score- themeisle otter blocks – gutenberg blocks, page builder for gutenberg editor & fse, otter blocks +1 moreOtter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE <= 2.6.8 - Authenticated (Author+) Limited File Upload to Stored Cross-Site Scripting6.4 Medium
- themeisle otter blocks – gutenberg blocks, page builder for gutenberg editor & fse, otter blocks +1 moreOtter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE <= 2.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Attributes6.4 Medium
- adobe animateOut-of-bounds access vulnerability in Adobe Animate that directly changes the rip when parsing FLA files.7.8 High
- adobe animateAdobe Animate 2024 WAV File Parsing Null Pointer Dereference5.5 Medium
- adobe animateAdobe Animation SWF File Parsing Memory Corruption5.5 Medium
- adobe animateAnimate has an arbitrary code execution vulnerability when parsing svg files7.8 High
- bosch ams, bis +1 moreA firmware bug which may lead to misinterpretation of data in the AMC2-4WCF and AMC2-2WCF...4.6 Medium
- nick pelton search keyword redirectWordPress Search Keyword Redirect plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- adobe illustratorIllustrator 2024 CDR File parsing Out of Bound Read Information disclosure vulnerability5.5 Medium
- adobe bridgeBridge 2024 MOV File parsing memory corruption5.5 Medium
- bdthemes element pack, element pack elementor addons, element pack – widgets, templates & addons for elementor +2 moreElement Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.5.6 - Sensitive Information Exposure via element_pack_ajax_search5.3 Medium
- metaslider slider, gallery, and carousel by metaslider – image slider, video slider, slider\, gallery\, and carousel +1 moreSlider, Gallery, and Carousel by MetaSlider – Responsive WordPress Slideshows <= 3.70.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via metaslider Shortcode6.4 Medium
- data443 inline related postsInline Related Posts < 3.6.0 - Subscriber+ Password Protected Post Read4.3 Medium
- mysql2mysql2 Remote Code Execution (RCE) via the readCodeFor function9.8 Critical
- mayurik advocate office management system, sourcecodester kortex lite advocate office management system +1 moreSourceCodester Kortex Lite Advocate Office Management System register_case.php sql injection4.7 Medium
- mayurik advocate office management system, sourcecodester kortex lite advocate office management system +1 moreSourceCodester Kortex Lite Advocate Office Management System adds.php sql injection4.7 Medium
- mayurik advocate office management system, sourcecodester kortex lite advocate office management system +1 moreSourceCodester Kortex Lite Advocate Office Management System addcase_stage.php sql injection4.7 Medium
- mayurik advocate office management system, sourcecodester kortex lite advocate office management system +1 moreSourceCodester Kortex Lite Advocate Office Management System activate_case.php sql injection4.7 Medium
- ninjaforms ninja formsCross-site request forgery (CSRF) vulnerability exists in Ninja Forms prior to 3.4.31. If a...8.8 High
- ninjaforms ninja formsNinja Forms prior to 3.8.1 contains a cross-site scripting vulnerability in submit processing. If...5.4 Medium
- ninjaforms ninja formsNinja Forms prior to 3.8.1 contains a cross-site scripting vulnerability in custom fields for...6.1 Medium
- Show moreLoading…