Wordfence Intelligence   >   Vulnerability Researchers   >   Marco Wotschka

Marco Wotschka

Organization: Wordfence

9
All Time Ranking
228
All Time Discoveries

1 Achievement

Learn more about Achievements
Wordfence Vulnerability Researcher
Wordfence Vulnerability Researcher
November 13, 2023
Learn more Learn more about Achievements

Showing 101-120 of 228 Vulnerabilities

Wicked Folders <= 2.18.16 - Missing Authorization on ajax_save_sort_order
5.4
CVE-2023-0719
Feb 7, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_move_object
5.4
CVE-2023-0712
Feb 7, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery on ajax_move_object
5.4
CVE-2023-0723
Feb 7, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_save_folder
5.4
CVE-2023-0718
Feb 7, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_edit_folder
5.4
CVE-2023-0716
Feb 7, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_save_folder_order
5.4
CVE-2023-0720
Feb 7, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_add_folder
5.4
CVE-2023-0724
Feb 7, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_clone_folder
5.4
CVE-2023-0725
Feb 7, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_save_sort_order
5.4
CVE-2023-0729
Feb 7, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Wicked Folders <= 2.18.16 - Missing Authorization via ajax_delete_folder
5.4
CVE-2023-0717
Feb 7, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Wicked Folders <= 2.18.16 - Missing Authorization via ajax_save_state
5.4
CVE-2023-0711
Feb 7, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_clone_folder
5.4
CVE-2023-0715
Feb 7, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_save_state
5.4
CVE-2023-0722
Feb 7, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_edit_folder
5.4
CVE-2023-0726
Feb 7, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_unassign_folders
5.4
CVE-2023-0685
Feb 6, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Wicked Folders <= 2.18.16 - Missing Authorization via ajax_unassign_folders
5.4
CVE-2023-0684
Feb 6, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Social Warfare <= 4.3.0 - Missing Authorization
5.4
CVE-2023-0402
Jan 5, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Social Warfare <= 4.3.1 - Cross-Site Request Forgery
5.4
CVE-2023-0403
Jan 5, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
Events Made Easy <= 2.3.16 - Missing Authorization
5.4
CVE-2023-0404
Dec 23, 2022
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Image Slider <= 1.1.121 - Cross-Site Request Forgery to Post Duplication
5.4
CVE-2022-2223
May 24, 2022
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Title CVE ID CVSS Vector Date
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_save_sort_order CVE-2023-0719 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L February 7, 2023
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_move_object CVE-2023-0712 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L February 7, 2023
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery on ajax_move_object CVE-2023-0723 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N February 7, 2023
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_save_folder CVE-2023-0718 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L February 7, 2023
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_edit_folder CVE-2023-0716 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L February 7, 2023
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_save_folder_order CVE-2023-0720 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L February 7, 2023
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_add_folder CVE-2023-0724 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N February 7, 2023
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_clone_folder CVE-2023-0725 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N February 7, 2023
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_save_sort_order CVE-2023-0729 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N February 7, 2023
Wicked Folders <= 2.18.16 - Missing Authorization via ajax_delete_folder CVE-2023-0717 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L February 7, 2023
Wicked Folders <= 2.18.16 - Missing Authorization via ajax_save_state CVE-2023-0711 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L February 7, 2023
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_clone_folder CVE-2023-0715 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L February 7, 2023
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_save_state CVE-2023-0722 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N February 7, 2023
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_edit_folder CVE-2023-0726 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N February 7, 2023
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_unassign_folders CVE-2023-0685 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N February 6, 2023
Wicked Folders <= 2.18.16 - Missing Authorization via ajax_unassign_folders CVE-2023-0684 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L February 6, 2023
Social Warfare <= 4.3.0 - Missing Authorization CVE-2023-0402 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L January 5, 2023
Social Warfare <= 4.3.1 - Cross-Site Request Forgery CVE-2023-0403 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L January 5, 2023
Events Made Easy <= 2.3.16 - Missing Authorization CVE-2023-0404 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N December 23, 2022
Image Slider <= 1.1.121 - Cross-Site Request Forgery to Post Duplication CVE-2022-2223 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N May 24, 2022

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation