Skip to content
OpenAdvisories

Vendor

sixstorage

2 known vulnerabilities.

Products

6Storage Rentals 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-15303

    6Storage Rentals <= 2.27.0 - Unauthenticated Account Takeover via 'email' Parameter

    The 6Storage Rentals plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.27.0. This is due to the six_storage_create_wp_user() AJAX handler being registered on wp_ajax_nopriv_six_storage_create_wp_user without any n…

    sixstorage 6Storage Rentals Web / CMS