CVEs published in April 2024
3,718 vulnerabilities, 293 critical, 10 exploited.
- cente ipv6, ipv6 snmpv2, ipv6 snmpv3 +3 more +5 moreOut-of-bounds read vulnerability caused by improper checking of the option length values in IPv6...5.3 Medium
- cente ipv6, ipv6 snmpv2, ipv6 snmpv3 +3 more +5 moreOut-of-bounds read vulnerability caused by improper checking of the option length values in IPv6...7.5 High
- planex communications inc. mzk-mf300n, planex mzk-mf300hp2 firmware, mzk-mf300n firmware +1 more +3 moreCommand injection vulnerability in MZK-MF300N all firmware versions allows a network-adjacent...8.8 High
- planex communications inc. mzk-mf300n, planex mzk-mf300hp2 firmware, mzk-mf300n firmware +1 more +3 moreActive debug code vulnerability exists in MZK-MF300N all firmware versions. If a logged-in user...6.8 Medium
- keyence kv replay viewer, kv studio, keyence corporation vt5-wx15/wx12 +2 more +4 moreOut-of-bounds read vulnerability exists in KV STUDIO Ver.11.64 and earlier and KV REPLAY VIEWER...7.8 High
- keyence kv replay viewer, kv studio, keyence corporation vt5-wx15/wx12 +2 more +4 moreOut-of-bounds write vulnerability exists in KV STUDIO Ver.11.64 and earlier and KV REPLAY VIEWER...8.8 High
- freshworks freshdesk (official)WordPress Freshdesk (official) plugin <= 2.3.6 - Open Redirection vulnerability4.7 Medium
- keyence vt studioVT STUDIO Ver.8.32 and earlier contains an issue with the DLL search path, which may lead to...7.8 High
- pixelite login with ajaxWordPress Login With Ajax plugin <= 4.1 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- e2pdfWordPress E2Pdf plugin <= 1.20.27 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- apppresserWordPress AppPresser plugin <= 4.3.0 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- andrew dashboard to-do listWordPress Dashboard To-Do List plugin <= 1.3.1 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- mailmunch mailchimp forms by mailmunch, mailchimp forms +1 moreWordPress MailChimp Forms by MailMunch plugin <= 3.2.1 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- smash balloon social post feed, syed balkhi smash balloon social post feed +1 moreWordPress Smash Balloon Social Post Feed plugin <= 4.2.1 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- rebelcode spotlight social media feedsWordPress Spotlight Social Feeds plugin <= 1.6.10 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- creativethemes blocksyWordPress Blocksy theme <= 2.0.22 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- pagelayer popularfxWordPress PopularFX theme <= 1.2.4 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- rara theme spa and salonWordPress Spa and Salon theme <= 1.2.7 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- catkin redi restaurant reservationWordPress ReDi Restaurant Reservation plugin <= 24.0128 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- pauple table & contact form 7 database – tablesomeWordPress Tablesome plugin <= 1.0.25 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- ertano mihanpanelWordPress MihanPanel plugin < 12.7 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- supsystic popup, popup by supsystic +1 moreWordPress Popup by Supsystic plugin <= 1.10.27 - Broken Access Control vulnerability4.3 Medium
- hewlett packard enterprise hpe flexnetwork and flexfabric productsCertain HPE FlexNetwork and FlexFabric Switches, Remote Authentication Bypass6.9 Medium
- philippe bernard faviconWordPress Favicon by RealFaviconGenerator plugin <= 1.3.29 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- hamid alinia login with phone numberWordPress Login with Phone Number plugin <= 1.6.93 - Cross Site Request Forgery (CSRF) vulnerability8.8 High
- ameliabooking ameliaWordPress Amelia plugin <= 1.0.95 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- data443 inline related postsWordPress Inline Related Posts plugin <= 3.3.1 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- marker.ioWordPress Marker.io plugin <= 1.1.8 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- hewlett packard enterprise hpe officeconnect 1820 network switchesHPE OfficeConnect 1820 Network switches, Cross-Site Request Forgery (CSRF)3.5 Low
- rara theme the conferenceWordPress The Conference theme <= 1.2.0 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- blossom themes sarada lite, blossomthemes sarada +1 moreWordPress Sarada Lite theme <= 1.1.2 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- tyche softwares product input fields for woocommerceWordPress Product Input Fields for WooCommerce plugin <= 1.7.0 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- liquidweb restrict contentWordPress Restrict Content plugin <= 3.2.8 - Broken Access Control vulnerability5.3 Medium
- stellarwp the events calendarWordPress The Events Calendar plugin <= 6.3.0 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- stefano lissa newsletterWordPress Newsletter plugin <= 8.0.6 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- tyche softwares currency per product for woocommerceWordPress Currency per Product for WooCommerce plugin <= 1.6.0 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- etoile web design ultimate product catalogueWordPress Ultimate Product Catalog plugin <= 5.2.15 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- anton aleksandrov wordpress hosting benchmark toolWordPress Hosting Benchmark tool plugin <= 1.3.6 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- pluginops feather login pageWordPress Feather Login Page plugin <= 1.1.5 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- live composer team page builder: live composerWordPress Page Builder: Live Composer plugin <= 1.5.35 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- themeinwp newsxpressWordPress NewsXpress theme <= 1.0.7 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- hewlett packard enterprise hpe msa san storage vss provider and capi proxy softwareHPE MSA SAN Storage VSS Provider and CAPI Proxy Software, Elevation of Privilege7.3 High
- edgarrojas extra product options builder for woocommerceWordPress Extra Product Options Builder for WooCommerce plugin <= 1.2.104 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- codepeople cp media playerWordPress CP Media Player plugin <= 1.1.3 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- typps calendarista basic editionWordPress Calendarista Basic Edition plugin <= 3.0.2 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- gold plugins before and afterWordPress Before And After plugin <= 3.9 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- ait-themes citadela listingWordPress Citadela Listing plugin < 5.20.0 - Cross-Site Request Forgery (CSRF) vulnerability5.4 Medium
- seedprod coming soon page, under construction & maintenance mode by seedprodWordPress Website Builder plugin <= 6.15.20 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- hewlett packard enterprise hpe nonstop web viewpoint enterprise software, hp web viewpoint t0986 +1 moreHPE NonStop Web ViewPoint Enterprise software, Unauthorized access8.3 High
- supsystic digital publications by supsysticWordPress Digital Publications by Supsystic plugin <= 1.7.7 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- Show moreLoading…