# CVEs published 2024-04-20

5 CVEs were published on April 20, 2024: 0 critical, 1 high. Days are UTC.

- [CVE-2024-4020](https://cve.now/CVE-2024-4020.md): Tenda FH1206 addressNat fromAddressNat buffer overflow (CVSS 8.8, Tenda FH1206)
- [CVE-2024-4019](https://cve.now/CVE-2024-4019.md): Byzoro Smart S80 Management Platform importhtml.php deserialization (CVSS 6.3, Byzoro Smart S80 Management Platform)
- [CVE-2024-4014](https://cve.now/CVE-2024-4014.md): hCaptcha for WordPress \<= 4.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via cf7-hcaptcha Shortcode (CVSS 6.4, hCaptcha for WP)
- [CVE-2024-1730](https://cve.now/CVE-2024-1730.md): Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Media Slider, Drag Drop Slider, Video Slider, Product Slider… (CVSS 5.4, bdthemes Prime Slider – Addons for Elementor)
- [CVE-2024-1057](https://cve.now/CVE-2024-1057.md): ShopLentor – WooCommerce Builder for Elementor & Gutenberg +10 Modules – All in One Solution (formerly WooLentor) \<= 2.8.1 - Authenticated… (CVSS 6.4, devitemsllc ShopLentor – All-in-One WooCommerce Growth & St…)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2024-04-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.