← All credits
Marco Wotschka
232 vulnerability records and advisories credit this contributor.
CVE-2023-4726
Ultimate Dashboard <= 3.7.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
CVE-2023-1029
WP Meta SEO <= 4.5.3 - Cross-Site Request Forgery via 'regenerateSitemaps'
CVE-2023-0088
Swifty Page Manager <= 3.0.1 - Cross-Site Request Forgery
CVE-2023-1155
Cost Calculator <= 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2023-2599
Active Directory Integration / LDAP Integration <= 4.1.4 - Cross-Site Request Forgery to SQL Injection
CVE-2023-1022
WP Meta SEO <= 4.5.3 - Missing Authorization in 'wpmsGGSaveInformation'
CVE-2023-2354
CHP Ads Block Detector <= 3.9.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting
CVE-2024-7568
Favicon Generator <= 1.5 - Cross-Site Request Forgery to Arbitrary File Deletion
CVE-2023-2284
WP Activity Log Premium <= 4.5.0 - Missing Authorization via ajax_switch_db
CVE-2023-1028
WP Meta SEO <= 4.5.3 - Cross-Site Request Forgery via 'setIgnore'