Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
6storage-rentals
WordPress
· Plugin
7 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
6Storage Rentals <= 2.31.0 - Authenticated (Subscriber+) Authentication Bypass to Administrator Account Takeover via 'six_storage_online_api_url' Option Poisoning + Transient-Backed Auth Bypass
CVE-2026-103883
6storage-rentals
WordPress
High
No fix reported
2026-11-11
6Storage Rentals <= 2.26.0 - Unauthenticated Insecure Direct Object Reference to Arbitrary User Disclosure and Modification via 'userId' Parameter
CVE-2026-9185
6storage-rentals
WordPress
High
Fix reported
2026-09-14
6Storage Rentals <= 2.28.0 - Unauthenticated Account Takeover via 'email' Parameter
CVE-2026-15303
6storage-rentals
WordPress
Critical
Fix reported
2026-09-03
6Storage Rentals <= 2.20.0 - Authenticated (Subscriber+) Server-Side Request Forgery
CVE-2025-67623
6storage-rentals
WordPress
Medium
No fix reported
2026-01-06
6Storage Rentals <= 2.19.6 - Missing Authorization
CVE-2023-26002
6storage-rentals
WordPress
Medium
No fix reported
2025-06-10
6Storage Rentals <= 2.19.4 - Missing Authorization
CVE-2025-47619
6storage-rentals
WordPress
Medium
No fix reported
2025-05-20
6Storage Rentals <= 2.19.4 - Missing Authorization
CVE-2025-32178
6storage-rentals
WordPress
Medium
No fix reported
2025-05-16
