Skip to content6storage Rentals vulnerabilities
- 6storage rentals, sixstorage 6storage rentals +1 more6Storage Rentals <= 2.31.0 - Authenticated (Subscriber+) Authentication Bypass to Administrator Account Takeover via 'six_storage_online_api_url' Option Poisoning + Transient-Backed Auth BypassCVE-2026-1038838.8 High
- 6storage rentals, sixstorage 6storage rentals +1 more6Storage Rentals <= 2.27.0 - Unauthenticated Account Takeover via 'email' ParameterCVE-2026-153039.8 Critical
- 6storage rentals, sixstorage 6storage rentals +1 more6Storage Rentals <= 2.22.0 - Unauthenticated Insecure Direct Object Reference to Arbitrary User Disclosure and Modification via 'userId' ParameterCVE-2026-91857.5 High
- 6storage rentalsWordPress 6Storage Rentals plugin <= 2.22.0 - Server Side Request Forgery (SSRF) vulnerabilityCVE-2025-676235.4 Medium
- 6storage rentalsWordPress 6Storage Rentals <= 2.19.5 - Broken Access Control VulnerabilityCVE-2023-260024.3 Medium
- 6storage rentalsWordPress 6Storage Rentals plugin <= 2.20.2 - Broken Access Control vulnerabilityCVE-2025-476196.5 Medium
- 6storage rentalsWordPress 6Storage Rentals plugin <= 2.20.2 - Broken Access Control vulnerabilityCVE-2025-321785.4 Medium