Wordfence Intelligence   >   Vulnerability Researchers   >   Marco Wotschka

Marco Wotschka

Organization: Wordfence

9
All Time Ranking
228
All Time Discoveries

1 Achievement

Learn more about Achievements
Wordfence Vulnerability Researcher
Wordfence Vulnerability Researcher
November 13, 2023
Learn more Learn more about Achievements

Showing 21-40 of 228 Vulnerabilities

Corner Ad <= 1.0.56 - Cross-Site Request Forgery
8.8
CVE-2022-3427
Sep 9, 2022
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Ecwid Ecommerce Shopping Cart <= 6.10.23 - Cross-Site Request Forgery to Settings/Options Update
8.8
CVE-2022-2432
Jul 11, 2022
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
BackWPup <= 4.0.1 - Authenticated (Administrator+) Directory Traversal
8.7
CVE-2023-5504
Nov 22, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H
Essential Blocks <= 4.2.0 - Unauthenticated PHP Object Injection via products
8.1
CVE-2023-4402
Sep 13, 2023
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Essential Blocks <= 4.2.0 - Unauthenticated PHP Object Injection via queries
8.1
CVE-2023-4386
Sep 13, 2023
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Quick Restaurant Menu <= 2.0.2 - Missing Authorization
8.1
CVE-2023-0555
Jan 27, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Quick Restaurant Menu <= 2.0.2 - Cross-Site Request Forgery
8.1
CVE-2023-0554
Jan 27, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H
Quick Restaurant Menu <= 2.0.2 - Insecure Direct Object Reference
8.1
CVE-2023-0550
Jan 27, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Advanced Local Pickup for WooCommerce <= 1.5.5 - Authenticated (Administrator+) SQL Injection
7.2
CVE-2023-2841
Oct 21, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Colibri Page Builder <= 1.0.227 - Authenticated (Administrator+) SQL Injection via post_id
7.2
CVE-2023-2188
Jun 22, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Multiple Page Generator Plugin <= 3.3.17 - Authenticated (Administrator+) SQL Injection
7.2
CVE-2023-2607
May 16, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Active Directory Integration / LDAP Integration <= 4.1.4 - Authenticated (Administrator+) SQL Injection
7.2
CVE-2023-2484
May 12, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Limit Login Attempts <= 1.7.1 - Unauthenticated Stored Cross-Site Scripting
7.2
CVE-2023-1912
Apr 6, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
Mega Addons For WPBakery Page Builder <= 4.2.7 - Authenticated (Subscriber+) Settings Update
7.1
CVE-2022-4501
Dec 14, 2022
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L
Social Media Share Buttons & Social Sharing Icons <= 2.8.5 - Information Exposure
6.5
CVE-2023-5070
Oct 16, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Metform Elementor Contact Form Builder <= 3.3.0 - Missing Authorization
6.5
CVE-2023-1843
May 4, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
YourChannel <= 1.2.3 - Missing Authorization to Plugin Settings Reset
6.5
CVE-2023-1865
Apr 5, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
YourChannel <= 1.2.3 - Missing Authorization to Plugin Cache Reset
6.5
CVE-2023-1868
Apr 5, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Kraken.io Image Optimizer <= 2.6.8 - Missing Authorization to Authenticated (Subscriber+) Plugin Options Update
6.5
CVE-2023-0619
Feb 1, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Wbcom Designs – BuddyPress Group Reviews <= 2.8.3 - Unauthorized AJAX Actions due to Nonce Bypass
6.5
CVE-2022-2108
Jun 16, 2022
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Title CVE ID CVSS Vector Date
Corner Ad <= 1.0.56 - Cross-Site Request Forgery CVE-2022-3427 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H September 9, 2022
Ecwid Ecommerce Shopping Cart <= 6.10.23 - Cross-Site Request Forgery to Settings/Options Update CVE-2022-2432 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H July 11, 2022
BackWPup <= 4.0.1 - Authenticated (Administrator+) Directory Traversal CVE-2023-5504 8.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H November 22, 2023
Essential Blocks <= 4.2.0 - Unauthenticated PHP Object Injection via products CVE-2023-4402 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H September 13, 2023
Essential Blocks <= 4.2.0 - Unauthenticated PHP Object Injection via queries CVE-2023-4386 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H September 13, 2023
Quick Restaurant Menu <= 2.0.2 - Missing Authorization CVE-2023-0555 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H January 27, 2023
Quick Restaurant Menu <= 2.0.2 - Cross-Site Request Forgery CVE-2023-0554 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H January 27, 2023
Quick Restaurant Menu <= 2.0.2 - Insecure Direct Object Reference CVE-2023-0550 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H January 27, 2023
Advanced Local Pickup for WooCommerce <= 1.5.5 - Authenticated (Administrator+) SQL Injection CVE-2023-2841 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H October 21, 2023
Colibri Page Builder <= 1.0.227 - Authenticated (Administrator+) SQL Injection via post_id CVE-2023-2188 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H June 22, 2023
Multiple Page Generator Plugin <= 3.3.17 - Authenticated (Administrator+) SQL Injection CVE-2023-2607 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H May 16, 2023
Active Directory Integration / LDAP Integration <= 4.1.4 - Authenticated (Administrator+) SQL Injection CVE-2023-2484 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H May 12, 2023
Limit Login Attempts <= 1.7.1 - Unauthenticated Stored Cross-Site Scripting CVE-2023-1912 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N April 6, 2023
Mega Addons For WPBakery Page Builder <= 4.2.7 - Authenticated (Subscriber+) Settings Update CVE-2022-4501 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L December 14, 2022
Social Media Share Buttons & Social Sharing Icons <= 2.8.5 - Information Exposure CVE-2023-5070 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N October 16, 2023
Metform Elementor Contact Form Builder <= 3.3.0 - Missing Authorization CVE-2023-1843 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L May 4, 2023
YourChannel <= 1.2.3 - Missing Authorization to Plugin Settings Reset CVE-2023-1865 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L April 5, 2023
YourChannel <= 1.2.3 - Missing Authorization to Plugin Cache Reset CVE-2023-1868 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L April 5, 2023
Kraken.io Image Optimizer <= 2.6.8 - Missing Authorization to Authenticated (Subscriber+) Plugin Options Update CVE-2023-0619 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N February 1, 2023
Wbcom Designs – BuddyPress Group Reviews <= 2.8.3 - Unauthorized AJAX Actions due to Nonce Bypass CVE-2022-2108 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N June 16, 2022

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation