WordPress Plugin Vulnerabilities

6Storage Rentals <= 2.20.1 - Missing Authorization

Description

The plugin is vulnerable to unauthorized access due to a missing capability check on a function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform an unauthorized action.

Affects Plugins

No known fix

References

Classification

Type
NO AUTHORISATION
CWE

Miscellaneous

Original Researcher
astra.r3verii
Verified
No

Timeline

Publicly Published
2025-05-16 (about 11 months ago)
Added
2025-05-20 (about 11 months ago)
Last Updated
2026-02-26 (about 2 months ago)

Other