Wordfence Intelligence   >   Vulnerability Researchers   >   Marco Wotschka

Marco Wotschka

Organization: Wordfence

9
All Time Ranking
228
All Time Discoveries

1 Achievement

Learn more about Achievements
Wordfence Vulnerability Researcher
Wordfence Vulnerability Researcher
November 13, 2023
Learn more Learn more about Achievements

Showing 21-40 of 228 Vulnerabilities

WooCommerce PDF Invoice Builder <= 1.2.89 - Missing Authorization to Sensitive Information Exposure
4.3
CVE-2023-4245
Aug 18, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
WooCommerce PDF Invoice Builder <= 1.2.90 - Cross-Site Request Forgery to Custom Field Creation
4.3
CVE-2023-4161
Aug 16, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
WooCommerce PDF Invoice Builder <= 1.2.90 - Cross-Site Request Forgery via Save
4.3
CVE-2023-3764
Aug 11, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Subscribe2 <= 10.40 - Cross-Site Request Forgery
4.3
CVE-2023-3407
Jun 26, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Subscribe2 <= 10.40 - Missing Authorization
4.3
CVE-2023-1844
Jun 26, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Gallery Metabox <= 1.5 - Missing Authorization via refresh_metabox
4.3
CVE-2023-2562
Jun 22, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Gallery Metabox <= 1.5 - Missing Authorization via gallery_remove
4.3
CVE-2023-2561
Jun 22, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
WP-Members Membership <= 3.4.7.3 - Cross-Site Request Forgery to Settings Update
4.3
CVE-2023-2869
Jun 22, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
CHP Ads Block Detector <= 3.9.4 - Cross-Site Request Forgery via chp_abd_action
4.3
CVE-2023-2352
Jun 15, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
CHP Ads Block Detector <= 3.9.4 - Missing Authorization to Plugin Settings Update
4.3
CVE-2023-2353
Jun 15, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
WordPress Contact Forms by Cimatti <= 1.5.7 - Cross-Site Request Forgery via _accua_forms_form_edit_action
4.3
CVE-2023-2563
Jun 12, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
WP-Members Membership <= 3.4.7.3 - Missing Authorization to Settings Update
4.3
CVE-2023-2869
Jun 8, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
WP Activity Log <= 4.5.0 - Missing Capabilities Check to User Enumeration
4.3
CVE-2023-2261
May 17, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
WP Activity Log <= 4.5.0 - Cross-Site Request Forgery via ajax_run_cleanup
4.3
CVE-2023-2286
May 17, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
WP Activity Log Premium <= 4.5.0 - Missing Authorization via ajax_switch_db
4.3
CVE-2023-2284
May 17, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
WP Activity Log Premium <= 4.5.0 - Cross-Site Request Forgery via ajax_switch_db
4.3
CVE-2023-2285
May 17, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Essential Blocks <= 4.0.6 - Cross-Site Request Forgery via save
4.3
CVE-2023-2087
Apr 18, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Essential Blocks <= 4.0.6 - Missing Authorization via template_count
4.3
CVE-2023-2086
Apr 18, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Essential Blocks <= 4.0.6 - Missing Authorization via get
4.3
CVE-2023-2084
Apr 18, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Essential Blocks <= 4.0.6 - Missing Authorization via save
4.3
CVE-2023-2083
Apr 18, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Title CVE ID CVSS Vector Date
WooCommerce PDF Invoice Builder <= 1.2.89 - Missing Authorization to Sensitive Information Exposure CVE-2023-4245 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N August 18, 2023
WooCommerce PDF Invoice Builder <= 1.2.90 - Cross-Site Request Forgery to Custom Field Creation CVE-2023-4161 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N August 16, 2023
WooCommerce PDF Invoice Builder <= 1.2.90 - Cross-Site Request Forgery via Save CVE-2023-3764 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N August 11, 2023
Subscribe2 <= 10.40 - Cross-Site Request Forgery CVE-2023-3407 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N June 26, 2023
Subscribe2 <= 10.40 - Missing Authorization CVE-2023-1844 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N June 26, 2023
Gallery Metabox <= 1.5 - Missing Authorization via refresh_metabox CVE-2023-2562 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N June 22, 2023
Gallery Metabox <= 1.5 - Missing Authorization via gallery_remove CVE-2023-2561 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N June 22, 2023
WP-Members Membership <= 3.4.7.3 - Cross-Site Request Forgery to Settings Update CVE-2023-2869 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N June 22, 2023
CHP Ads Block Detector <= 3.9.4 - Cross-Site Request Forgery via chp_abd_action CVE-2023-2352 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N June 15, 2023
CHP Ads Block Detector <= 3.9.4 - Missing Authorization to Plugin Settings Update CVE-2023-2353 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N June 15, 2023
WordPress Contact Forms by Cimatti <= 1.5.7 - Cross-Site Request Forgery via _accua_forms_form_edit_action CVE-2023-2563 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N June 12, 2023
WP-Members Membership <= 3.4.7.3 - Missing Authorization to Settings Update CVE-2023-2869 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N June 8, 2023
WP Activity Log <= 4.5.0 - Missing Capabilities Check to User Enumeration CVE-2023-2261 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N May 17, 2023
WP Activity Log <= 4.5.0 - Cross-Site Request Forgery via ajax_run_cleanup CVE-2023-2286 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N May 17, 2023
WP Activity Log Premium <= 4.5.0 - Missing Authorization via ajax_switch_db CVE-2023-2284 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N May 17, 2023
WP Activity Log Premium <= 4.5.0 - Cross-Site Request Forgery via ajax_switch_db CVE-2023-2285 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N May 17, 2023
Essential Blocks <= 4.0.6 - Cross-Site Request Forgery via save CVE-2023-2087 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N April 18, 2023
Essential Blocks <= 4.0.6 - Missing Authorization via template_count CVE-2023-2086 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N April 18, 2023
Essential Blocks <= 4.0.6 - Missing Authorization via get CVE-2023-2084 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N April 18, 2023
Essential Blocks <= 4.0.6 - Missing Authorization via save CVE-2023-2083 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N April 18, 2023

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation