← All credits
Marco Wotschka
232 vulnerability records and advisories credit this contributor.
CVE-2022-3622
Blog2Social <= 6.9.11 - Missing Authorization to Authenticated (Subscriber+) Settings Update
CVE-2023-2261
WP Activity Log <= 4.5.0 - Missing Capabilities Check to User Enumeration
CVE-2023-2120
Thumbnail carousel slider <= 1.1.9 - Reflected Cross-Site Scripting
CVE-2024-8121
The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Missing Authorization to Admin Username Change
CVE-2023-1334
RapidLoad Power-Up for Autoptimize <= 1.7.1 - Missing Authorization in 'queue_posts'
CVE-2023-4021
Modern Events Calendar lite < 7.1.0 - Authenticated (Admin+) Stored Cross-Site Scripting
CVE-2023-4471
Order Tracking Pro <= 3.3.6 - Reflected Cross-Site Scripting
CVE-2022-3995
TeraWallet – For WooCommerce <= 1.4.3 - Insecure Direct Object Reference
CVE-2023-3764
WooCommerce PDF Invoice Builder <= 1.2.90 - Cross-Site Request Forgery via Save
CVE-2023-1335
RapidLoad Power-Up for Autoptimize <= 1.7.1 - Missing Authorization in 'ucss_connect'