Skip to content
Threat Feed
Subscribe

Vendor

6Storage

1 brief RSS
critical advisory

Authentication Bypass in 6Storage Rentals WordPress Plugin

The 6Storage Rentals WordPress plugin contains a critical authentication bypass vulnerability (CVE-2026-15303) that allows unauthenticated attackers to impersonate any user, including administrators, via the six_storage_create_wp_user AJAX handler.

6Storage Rentals wordpress authentication-bypass web-application-security
1r 1t 1c