← All credits
Marco Wotschka
232 vulnerability records and advisories credit this contributor.
CVE-2022-2108
Wbcom Designs – BuddyPress Group Reviews <= 2.8.3 - Unauthorized AJAX Actions due to Nonce Bypass
CVE-2023-0717
Wicked Folders <= 2.18.16 - Missing Authorization via ajax_delete_folder
CVE-2023-2229
Quick Post Duplicator <= 2.0 - Authenticated (Contributor+) SQL Injection via post_id
CVE-2023-1865
YourChannel <= 1.2.3 - Missing Authorization to Plugin Settings Reset
CVE-2023-4940
BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Product Manipulation
CVE-2023-1840
Sp*tify Play Button for WordPress <= 2.07 - Authenticated (Administrator+) Stored Cross-Site Scripting
CVE-2022-4954
Waiting: One-click countdowns <= 0.6.2 - Authenticated (Administrator+) Cross-Site Scripting
CVE-2023-4943
BEAR <= 1.1.3.3 - Missing Authorization to Product Manipulation
CVE-2023-1333
RapidLoad Power-Up for Autoptimize <= 1.7.1 - Missing Authorization in 'clear_page_cache'
CVE-2023-4975
Website Builder by SeedProd <= 6.15.13.1 - Cross-Site Request Forgery to Settings Update