Wordfence Intelligence   >   Vulnerability Researchers   >   Marco Wotschka

Marco Wotschka

Organization: Wordfence

9
All Time Ranking
228
All Time Discoveries

1 Achievement

Learn more about Achievements
Wordfence Vulnerability Researcher
Wordfence Vulnerability Researcher
November 13, 2023
Learn more Learn more about Achievements

Showing 41-60 of 228 Vulnerabilities

Custom 404 Pro <= 3.7.1 - Cross-Site Request Forgery
4.3
CVE-2023-0385
Jan 18, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Quick Restaurant Menu <= 2.0.2 - Insecure Direct Object Reference
8.1
CVE-2023-0550
Jan 27, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Quick Restaurant Menu <= 2.0.2 - Cross-Site Request Forgery
8.1
CVE-2023-0554
Jan 27, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H
Quick Restaurant Menu <= 2.0.2 - Missing Authorization
8.1
CVE-2023-0555
Jan 27, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Quick Restaurant Menu <= 2.0.2 - Authenticated (Administrator+) Cross-Site Scripting
4.4
CVE-2023-0553
Jan 27, 2023
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Kraken.io Image Optimizer <= 2.6.8 - Missing Authorization to Authenticated (Subscriber+) Plugin Options Update
6.5
CVE-2023-0619
Feb 1, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_unassign_folders
5.4
CVE-2023-0685
Feb 6, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Wicked Folders <= 2.18.16 - Missing Authorization via ajax_unassign_folders
5.4
CVE-2023-0684
Feb 6, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_save_sort_order
5.4
CVE-2023-0719
Feb 7, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_add_folder
5.4
CVE-2023-0713
Feb 7, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery on ajax_save_folder
5.4
CVE-2023-0728
Feb 7, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_save_folder_order
5.4
CVE-2023-0730
Feb 7, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_edit_folder
5.4
CVE-2023-0726
Feb 7, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_save_state
5.4
CVE-2023-0722
Feb 7, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_delete_folder
5.4
CVE-2023-0727
Feb 7, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_clone_folder
5.4
CVE-2023-0715
Feb 7, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Wicked Folders <= 2.18.16 - Missing Authorization via ajax_save_state
5.4
CVE-2023-0711
Feb 7, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Wicked Folders <= 2.18.16 - Missing Authorization via ajax_delete_folder
5.4
CVE-2023-0717
Feb 7, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery on ajax_move_object
5.4
CVE-2023-0723
Feb 7, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_edit_folder
5.4
CVE-2023-0716
Feb 7, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Title CVE ID CVSS Vector Date
Custom 404 Pro <= 3.7.1 - Cross-Site Request Forgery CVE-2023-0385 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N January 18, 2023
Quick Restaurant Menu <= 2.0.2 - Insecure Direct Object Reference CVE-2023-0550 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H January 27, 2023
Quick Restaurant Menu <= 2.0.2 - Cross-Site Request Forgery CVE-2023-0554 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H January 27, 2023
Quick Restaurant Menu <= 2.0.2 - Missing Authorization CVE-2023-0555 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H January 27, 2023
Quick Restaurant Menu <= 2.0.2 - Authenticated (Administrator+) Cross-Site Scripting CVE-2023-0553 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N January 27, 2023
Kraken.io Image Optimizer <= 2.6.8 - Missing Authorization to Authenticated (Subscriber+) Plugin Options Update CVE-2023-0619 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N February 1, 2023
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_unassign_folders CVE-2023-0685 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N February 6, 2023
Wicked Folders <= 2.18.16 - Missing Authorization via ajax_unassign_folders CVE-2023-0684 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L February 6, 2023
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_save_sort_order CVE-2023-0719 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L February 7, 2023
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_add_folder CVE-2023-0713 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L February 7, 2023
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery on ajax_save_folder CVE-2023-0728 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N February 7, 2023
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_save_folder_order CVE-2023-0730 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N February 7, 2023
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_edit_folder CVE-2023-0726 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N February 7, 2023
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_save_state CVE-2023-0722 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N February 7, 2023
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_delete_folder CVE-2023-0727 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N February 7, 2023
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_clone_folder CVE-2023-0715 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L February 7, 2023
Wicked Folders <= 2.18.16 - Missing Authorization via ajax_save_state CVE-2023-0711 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L February 7, 2023
Wicked Folders <= 2.18.16 - Missing Authorization via ajax_delete_folder CVE-2023-0717 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L February 7, 2023
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery on ajax_move_object CVE-2023-0723 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N February 7, 2023
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_edit_folder CVE-2023-0716 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L February 7, 2023

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation