Vendors / sixstorage Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 1
Exploited now sixstorage records in CISA KEV No sixstorage vulnerabilities are listed in CISA KEV.
Priority MEDIUM 50
The 6Storage Rentals plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.27.0.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00844 · Published 2026-08-15 · No fix listed CWE-287
Priority LOW 39
The 6Storage Rentals plugin for WordPress is vulnerable to Authorization Bypass Through User-Controlled Key in all versions up to and including 2.22.0 via the `userId` parameter of the `six_storage_get_user_info` and `si…
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00403 · Published 2026-06-09 · No fix listed CWE-639
Open these records in search → All records by CVSS severity
1 1 0 0 0
