CVEs published in April 2024
3,718 vulnerabilities, 293 critical, 10 exploited.
- qnap qufirewallQuFirewall5.5 Medium
- qnap media streaming add-onMedia Streaming add-on9.6 Critical
- qnap qts, quts hero +1 moreQTS, QuTS hero5.0 Medium
- qnap qts, quts hero +1 moreQTS, QuTS hero5.0 Medium
- qnap qts, quts hero +1 moreQTS, QuTS hero7.4 High
- qnap qts, quts hero +1 moreQTS, QuTS hero6.4 Medium
- qnap qts, quts hero, qutscloud +2 moreQTS, QuTS hero, QuTScloud8.7 High
- qnap qts, quts hero, qutscloud +2 moreQTS, QuTS hero, QuTScloud8.7 High
- qnap qts, quts hero, qutscloud +2 moreQTS, QuTS hero, QuTScloud6.5 Medium
- qnap qts, quts hero, qutscloud +2 moreQTS, QuTS hero, QuTScloud7.5 High
- qnap myqnapcloud linkmyQNAPcloud Link9.9 Critical
- qnap qts, quts hero, qutscloud +2 moreQTS, QuTS hero, QuTScloud10.0 Critical
- aazztech post sliderWordPress Post Slider plugin <= 1.6.7 - Broken Access Control vulnerability5.4 Medium
- mmilan81 mm-email2imageMM-email2image <= 0.2.5 - Stored XSS via CSRF3.8 Low
- sayful islam filterable portfolioWordPress Filterable Portfolio plugin <= 1.6.4 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- extend themes teluro, wordpress teluro theme +1 moreWordPress Teluro theme <= 1.0.31 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- tony zeoli radio stationWordPress Radio Station plugin <= 2.5.7 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- jegstudio financioWordPress Financio theme <= 1.1.3 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- optinmonster popup builder team optinmonsterWordPress Popup Builder by OptinMonster plugin <= 2.15.3 - Cross Site Request Forgery (CSRF) Notice Dismissal vulnerability4.3 Medium
- satrya smart recent posts widgetWordPress Smart Recent Posts Widget plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- meks smart social widget, mekshq meks smart social widget +1 moreWordPress Meks Smart Social Widget plugin <= 1.6.4 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- meks themeforest smart widgetWordPress Meks ThemeForest Smart Widget plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- themencode fan page widget by themencodeWordPress Fan Page Widget by ThemeNcode plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- broadstreet xpress wordpress ad widgetWordPress WordPress Ad Widget plugin <= 2.20.0 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- rimes gold cf7 file download – file download for cf7, cf7 file download +1 moreWordPress CF7 File Download plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- linux, linux kernel +1 moreaio: fix mremap after fork null-deref5.5 Medium
- implecode reviews plusWordPress Reviews Plus plugin <= 1.3.4 - Broken Access Control vulnerability4.3 Medium
- vektor,inc. vk block patternsWordPress VK Block Patterns plugin <= 1.31.0 - Broken Access Control vulnerability5.3 Medium
- octolize flexible shippingWordPress Table Rate Shipping Method for WooCommerce by Flexible Shipping plugin <= 4.24.15 - Broken Access Control vulnerability4.3 Medium
- supsystic data tables generator by supsysticWordPress Data Tables Generator by Supsystic plugin <= 1.10.31 - Broken Access Control vulnerability4.3 Medium
- live composer team page builder: live composerWordPress Page Builder: Live Composer plugin <= 1.5.38 - Broken Access Control vulnerability4.7 Medium
- renzo johnson contact form 7 extension for mailchimpWordPress Contact Form 7 Extension For Mailchimp plugin <= 0.5.70 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- clickcease, clickcease click fraud protection, eranfl clickcease click fraud protection +2 moreWordPress ClickCease Click Fraud Protection plugin <= 3.2.7 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- famethemes fametheme demo importerWordPress FameTheme Demo Importer plugin <= 1.1.5 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- mainwp child reportsWordPress MainWP Child Reports plugin <= 2.1.1 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- cookie information a/s wp gdpr compliance, wordpress gdpr compliance +1 moreWordPress WP GDPR Compliance plugin <= 2.0.23 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- wp republic hide dashboard notificationsWordPress Hide Dashboard Notifications plugin <= 1.2.3 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- gnu glibc, debian linux, netapp element software +11 more +13 morenscd: netgroup cache assumes NSS callback uses in-buffer strings7.4 High
- eclipse ide, target management +1 moreEclipse Target Management <= 4.5.500 Command Injection9.8 Critical
- gnu glibc, debian linux, netapp h300s firmware +11 more +13 morenscd: netgroup cache may terminate daemon on memory allocation failure7.3 High
- gnu glibc, debian linux, netapp active iq unified manager +12 more +14 morenscd: Null pointer crashes after notfound response5.9 Medium
- gnu glibc, debian linux, netapp h300s firmware +8 more +10 morenscd: Stack-based buffer overflow in netgroup cache8.1 High
- renehermi wp staging – wordpress backup, restore & migration, unknown wp staging pro wordpress backup plugin +1 moreWP STAGING <= 3.4.3 and WP STAGING Pro <= 5.4.3 - Sensitive Information Exposure via Log File5.3 Medium
- themeisle ppom – product addons & custom fields for woocommerce, product addons \& fields for woocommerce +1 moreProduct Addons & Fields for WooCommerce <= 32.0.18 - Unauthenticated Arbitrary File Upload via ppom_upload_file9.8 Critical
- jack-kitterhing wp smtpThe WP SMTP plugin for WordPress is vulnerable to SQL Injection via the 'search' parameter in...7.2 High
- mattermost, mattermost server +1 moreMattermost fails to fully validate role changes2.7 Low
- jenkins mattermost, mattermost server +1 moreMattermost allows team admins to promote guests to team admins2.7 Low
- mattermost, mattermost server +1 moreMattermost fails to limit the number of active sessions4.3 Medium
- mattermost, mattermost server +1 moreMattermost crashes web clients via a malformed custom status4.3 Medium
- mattermost, mattermost server +1 moreDetailed error discloses full file path with dev mode off4.3 Medium
- Show moreLoading…