Wordfence Intelligence   >   Vulnerability Researchers   >   Marco Wotschka

Marco Wotschka

Organization: Wordfence

9
All Time Ranking
228
All Time Discoveries

1 Achievement

Learn more about Achievements
Wordfence Vulnerability Researcher
Wordfence Vulnerability Researcher
November 13, 2023
Learn more Learn more about Achievements

Showing 81-100 of 228 Vulnerabilities

WP Activity Log <= 4.5.0 - Cross-Site Request Forgery via ajax_run_cleanup
4.3
CVE-2023-2286
May 17, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
WP Activity Log Premium <= 4.5.0 - Missing Authorization via ajax_switch_db
4.3
CVE-2023-2284
May 17, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
WP Activity Log Premium <= 4.5.0 - Cross-Site Request Forgery via ajax_switch_db
4.3
CVE-2023-2285
May 17, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Multiple Page Generator Plugin <= 3.3.17 - Authenticated (Administrator+) SQL Injection
7.2
CVE-2023-2607
May 16, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Contact Form by Supsystic <= 1.7.24 - Cross-Site Request Forgery via AJAX action
5.4
CVE-2023-2528
May 16, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
Multiple Page Generator Plugin <= 3.3.17 - Cross-Site Request Forgery to SQL Injection
3.1
CVE-2023-2608
May 16, 2023
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L
PixelYourSite <= 9.3.6 and PixelYourSite Pro <= 9.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
CVE-2023-2584
May 16, 2023
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
video carousel slider with lightbox <= 1.0.22 - Reflected Cross-Site Scripting
6.1
CVE-2023-2710
May 15, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Video Gallery <= 1.0.10 - Reflected Cross-Site Scripting
6.1
CVE-2023-2708
May 15, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Active Directory Integration / LDAP Integration <= 4.1.4 - Authenticated (Administrator+) SQL Injection
7.2
CVE-2023-2484
May 12, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Active Directory Integration / LDAP Integration <= 4.1.4 - Cross-Site Request Forgery to SQL Injection
3.1
CVE-2023-2599
May 12, 2023
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L
WP Replicate Post <= 4.0.2 - Authenticated (Contributor+) SQL Injection
8.8
CVE-2023-2237
May 10, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Team Circle Image Slider With Lightbox <= 1.0.17 - Reflected Cross-Site Scripting
6.1
CVE-2023-2604
May 9, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Metform Elementor Contact Form Builder <= 3.3.0 - Missing Authorization
6.5
CVE-2023-1843
May 4, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Photo Gallery Slideshow & Masonry Tiled Gallery <= 1.0.13 - Reflected Cross-Site Scripting
6.1
CVE-2023-2402
Apr 28, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
wordpress vertical image slider plugin <= 1.2.16 - Reflected Cross-Site Scripting
6.1
CVE-2023-2289
Apr 25, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WP Responsive Tabs horizontal vertical and accordion Tabs <= 1.1.15 - Reflected Cross-Site Scripting
6.1
CVE-2023-2184
Apr 19, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Essential Blocks <= 4.0.6 - Missing Authorization via templates
4.3
CVE-2023-2085
Apr 18, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CMP – Coming Soon & Maintenance <= 4.1.7 - Maintenance Mode Bypass
5.3
CVE-2023-2159
Apr 18, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Essential Blocks <= 4.0.6 - Missing Authorization via template_count
4.3
CVE-2023-2086
Apr 18, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Title CVE ID CVSS Vector Date
WP Activity Log <= 4.5.0 - Cross-Site Request Forgery via ajax_run_cleanup CVE-2023-2286 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N May 17, 2023
WP Activity Log Premium <= 4.5.0 - Missing Authorization via ajax_switch_db CVE-2023-2284 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N May 17, 2023
WP Activity Log Premium <= 4.5.0 - Cross-Site Request Forgery via ajax_switch_db CVE-2023-2285 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N May 17, 2023
Multiple Page Generator Plugin <= 3.3.17 - Authenticated (Administrator+) SQL Injection CVE-2023-2607 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H May 16, 2023
Contact Form by Supsystic <= 1.7.24 - Cross-Site Request Forgery via AJAX action CVE-2023-2528 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L May 16, 2023
Multiple Page Generator Plugin <= 3.3.17 - Cross-Site Request Forgery to SQL Injection CVE-2023-2608 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L May 16, 2023
PixelYourSite <= 9.3.6 and PixelYourSite Pro <= 9.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-2584 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N May 16, 2023
video carousel slider with lightbox <= 1.0.22 - Reflected Cross-Site Scripting CVE-2023-2710 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N May 15, 2023
Video Gallery <= 1.0.10 - Reflected Cross-Site Scripting CVE-2023-2708 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N May 15, 2023
Active Directory Integration / LDAP Integration <= 4.1.4 - Authenticated (Administrator+) SQL Injection CVE-2023-2484 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H May 12, 2023
Active Directory Integration / LDAP Integration <= 4.1.4 - Cross-Site Request Forgery to SQL Injection CVE-2023-2599 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L May 12, 2023
WP Replicate Post <= 4.0.2 - Authenticated (Contributor+) SQL Injection CVE-2023-2237 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H May 10, 2023
Team Circle Image Slider With Lightbox <= 1.0.17 - Reflected Cross-Site Scripting CVE-2023-2604 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N May 9, 2023
Metform Elementor Contact Form Builder <= 3.3.0 - Missing Authorization CVE-2023-1843 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L May 4, 2023
Photo Gallery Slideshow & Masonry Tiled Gallery <= 1.0.13 - Reflected Cross-Site Scripting CVE-2023-2402 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N April 28, 2023
wordpress vertical image slider plugin <= 1.2.16 - Reflected Cross-Site Scripting CVE-2023-2289 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N April 25, 2023
WP Responsive Tabs horizontal vertical and accordion Tabs <= 1.1.15 - Reflected Cross-Site Scripting CVE-2023-2184 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N April 19, 2023
Essential Blocks <= 4.0.6 - Missing Authorization via templates CVE-2023-2085 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N April 18, 2023
CMP – Coming Soon & Maintenance <= 4.1.7 - Maintenance Mode Bypass CVE-2023-2159 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N April 18, 2023
Essential Blocks <= 4.0.6 - Missing Authorization via template_count CVE-2023-2086 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N April 18, 2023

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation