WordPress 6storage Rentals Vulnerabilities

Wordpress 6storage Rentals vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

9 June 2026

6Storage Rentals <= 2.22.0 - Unauthenticated Insecure Direct Object Reference to Arbitrary User Disclosure and Modification via 'userId' Parameter
CVE-2026-9185
WordPress6storage Rentals7.5HIGH

24 December 2025

Server-Side Request Forgery in 6Storage Rentals Plugin
CVE-2025-67623
WordPress6storage Rentals5.4MEDIUM

6 June 2025

Missing Authorization in 6Storage Rentals by 6Storage
CVE-2023-26002
WordPress6storage Rentals4.3MEDIUM

23 May 2025

Path Traversal Authorization Flaw in 6Storage Rentals by 6Storage
CVE-2025-47619
WordPress6storage Rentals6.5MEDIUM