Wordfence Intelligence   >   Vulnerability Researchers   >   Marco Wotschka

Marco Wotschka

Organization: Wordfence

9
All Time Ranking
228
All Time Discoveries

1 Achievement

Learn more about Achievements
Wordfence Vulnerability Researcher
Wordfence Vulnerability Researcher
November 13, 2023
Learn more Learn more about Achievements

Showing 61-80 of 228 Vulnerabilities

ARMember Lite - Membership Plugin <= 4.0.16 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
CVE-2023-3996
Jul 14, 2023
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Subscribe2 <= 10.40 - Missing Authorization
4.3
CVE-2023-1844
Jun 26, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Subscribe2 <= 10.40 - Cross-Site Request Forgery
4.3
CVE-2023-3407
Jun 26, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Gallery Metabox <= 1.5 - Missing Authorization via refresh_metabox
4.3
CVE-2023-2562
Jun 22, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Gallery Metabox <= 1.5 - Missing Authorization via gallery_remove
4.3
CVE-2023-2561
Jun 22, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Quick Post Duplicator <= 2.0 - Authenticated (Contributor+) SQL Injection via post_id
8.8
CVE-2023-2229
Jun 22, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
About Me 3000 widget <= 2.2.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
CVE-2023-3369
Jun 22, 2023
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Metform Elementor Contact Form Builder <= 3.3.2 - Cross-Site Request Forgery via permalink_setup
5.4
CVE-2023-2517
Jun 22, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
Colibri Page Builder <= 1.0.227 - Authenticated (Administrator+) SQL Injection via post_id
7.2
CVE-2023-2188
Jun 22, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
WP-Members Membership <= 3.4.7.3 - Cross-Site Request Forgery to Settings Update
4.3
CVE-2023-2869
Jun 22, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
CHP Ads Block Detector <= 3.9.4 - Cross-Site Request Forgery via chp_abd_action
4.3
CVE-2023-2352
Jun 15, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
CHP Ads Block Detector <= 3.9.4 - Missing Authorization to Plugin Settings Update
4.3
CVE-2023-2353
Jun 15, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CHP Ads Block Detector <= 3.9.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting
4.9
CVE-2023-2354
Jun 15, 2023
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N
WordPress Contact Forms by Cimatti <= 1.5.7 - Cross-Site Request Forgery via _accua_forms_form_edit_action
4.3
CVE-2023-2563
Jun 12, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
WP-Members Membership <= 3.4.7.3 - Missing Authorization to Settings Update
4.3
CVE-2023-2869
Jun 8, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Web Directory Free <= 1.6.8 - Authenticated (Contributor+) SQL Injection via post_id
8.8
CVE-2023-2201
Jun 1, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Easy Google Maps <= 1.11.7 - Cross-Site Request Forgery via AJAX action
5.4
CVE-2023-2526
May 24, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
WordPress File Upload / WordPress File Upload Pro <= 4.19.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
CVE-2023-2767
May 23, 2023
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
WordPress File Upload / WordPress File Upload Pro <= 4.19.1 - Authenticated (Administrator+) Path Traversal
4.9
CVE-2023-2688
May 23, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
WP Activity Log Premium <= 4.5.0 - Cross-Site Request Forgery via ajax_switch_db
4.3
CVE-2023-2285
May 17, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Title CVE ID CVSS Vector Date
ARMember Lite - Membership Plugin <= 4.0.16 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-3996 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N July 14, 2023
Subscribe2 <= 10.40 - Missing Authorization CVE-2023-1844 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N June 26, 2023
Subscribe2 <= 10.40 - Cross-Site Request Forgery CVE-2023-3407 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N June 26, 2023
Gallery Metabox <= 1.5 - Missing Authorization via refresh_metabox CVE-2023-2562 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N June 22, 2023
Gallery Metabox <= 1.5 - Missing Authorization via gallery_remove CVE-2023-2561 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N June 22, 2023
Quick Post Duplicator <= 2.0 - Authenticated (Contributor+) SQL Injection via post_id CVE-2023-2229 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H June 22, 2023
About Me 3000 widget <= 2.2.6 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-3369 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N June 22, 2023
Metform Elementor Contact Form Builder <= 3.3.2 - Cross-Site Request Forgery via permalink_setup CVE-2023-2517 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L June 22, 2023
Colibri Page Builder <= 1.0.227 - Authenticated (Administrator+) SQL Injection via post_id CVE-2023-2188 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H June 22, 2023
WP-Members Membership <= 3.4.7.3 - Cross-Site Request Forgery to Settings Update CVE-2023-2869 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N June 22, 2023
CHP Ads Block Detector <= 3.9.4 - Cross-Site Request Forgery via chp_abd_action CVE-2023-2352 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N June 15, 2023
CHP Ads Block Detector <= 3.9.4 - Missing Authorization to Plugin Settings Update CVE-2023-2353 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N June 15, 2023
CHP Ads Block Detector <= 3.9.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting CVE-2023-2354 4.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N June 15, 2023
WordPress Contact Forms by Cimatti <= 1.5.7 - Cross-Site Request Forgery via _accua_forms_form_edit_action CVE-2023-2563 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N June 12, 2023
WP-Members Membership <= 3.4.7.3 - Missing Authorization to Settings Update CVE-2023-2869 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N June 8, 2023
Web Directory Free <= 1.6.8 - Authenticated (Contributor+) SQL Injection via post_id CVE-2023-2201 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H June 1, 2023
Easy Google Maps <= 1.11.7 - Cross-Site Request Forgery via AJAX action CVE-2023-2526 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L May 24, 2023
WordPress File Upload / WordPress File Upload Pro <= 4.19.1 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-2767 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N May 23, 2023
WordPress File Upload / WordPress File Upload Pro <= 4.19.1 - Authenticated (Administrator+) Path Traversal CVE-2023-2688 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N May 23, 2023
WP Activity Log Premium <= 4.5.0 - Cross-Site Request Forgery via ajax_switch_db CVE-2023-2285 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N May 17, 2023

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation