← All credits
Marco Wotschka
232 vulnerability records and advisories credit this contributor.
CVE-2023-1346
RapidLoad Power-Up for Autoptimize <= 1.7.1 - Cross-Site Request Forgery via 'clear_page_cache'
CVE-2024-8123
The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Insecure Direct Object Reference
CVE-2023-2159
CMP – Coming Soon & Maintenance <= 4.1.7 - Maintenance Mode Bypass
CVE-2023-4386
Essential Blocks <= 4.2.0 - Unauthenticated PHP Object Injection via queries
CVE-2023-0729
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_save_sort_order
CVE-2023-1375
WP Fastest Cache <= 1.1.2 - Missing Authorization to Cache Deletion
CVE-2023-2085
Essential Blocks <= 4.0.6 - Missing Authorization via templates
CVE-2023-2688
WordPress File Upload / WordPress File Upload Pro <= 4.19.1 - Authenticated (Administrator+) Path Traversal
CVE-2023-4926
BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Product Deletion
CVE-2023-5533
AI ChatBot <= 4.8.9 and 4.9.2 - Missing Authorization on AJAX actions