# CVEs published 2024-04-20

5 CVEs were published on April 20, 2024: 0 critical, 1 high. Days are UTC.

- [CVE-2024-4020](https://cve.now/CVE-2024-4020.md): Tenda FH1206 addressNat fromAddressNat buffer overflow (CVSS 8.8, Tenda FH1206)
- [CVE-2024-4019](https://cve.now/CVE-2024-4019.md): Byzoro Smart S80 Management Platform importhtml.php deserialization (CVSS 6.3, Byzoro Smart S80 Management Platform)
- [CVE-2024-4014](https://cve.now/CVE-2024-4014.md): hCaptcha for WordPress \<= 4.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via cf7-hcaptcha Shortcode (CVSS 6.4, hCaptcha for WP)
- [CVE-2024-1730](https://cve.now/CVE-2024-1730.md): Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Media Slider, Drag Drop Slider, Video Slider, Product Slider, Ecommerce Slider) \<= 3.14.0 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 5.4, bdthemes Prime Slider – Addons for Elementor)
- [CVE-2024-1057](https://cve.now/CVE-2024-1057.md): ShopLentor – WooCommerce Builder for Elementor & Gutenberg +10 Modules – All in One Solution (formerly WooLentor) \<= 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, devitemsllc ShopLentor – All-in-One WooCommerce Growth & St…)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2024-04-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.