← All credits
Marco Wotschka
232 vulnerability records and advisories credit this contributor.
CVE-2023-0722
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_save_state
CVE-2022-3240
Follow Me Plugin <= 3.1.1 - Cross-Site Request Forgery to Cross-Site Scripting
CVE-2023-5241
AI ChatBot <= 4.8.9 and 4.9.2 - Authenticated (Subscriber+) Directory Traversal to Arbitrary File Write via qcld_openai_upload_pagetraining_file
CVE-2023-4686
WP Customer Reviews <= 3.6.6 - Authenticated (Subscriber+) Sensitive Information Exposure
CVE-2023-2767
WordPress File Upload / WordPress File Upload Pro <= 4.19.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
CVE-2023-5756
Digital Publications by Supsystic <= 1.7.6 - Cross-Site Request Forgery via AJAX action
CVE-2023-4839
WP Go Maps <= 9.0.32 - Authenticated (Administrator+) Stored Cross-Site Scripting
CVE-2023-4245
WooCommerce PDF Invoice Builder <= 1.2.89 - Missing Authorization to Sensitive Information Exposure
CVE-2023-4402
Essential Blocks <= 4.2.0 - Unauthenticated PHP Object Injection via products
CVE-2023-1929
WP Fastest Cache <= 1.1.2 - Missing Authorization in 'wpfc_purgecache_varnish_callback'