Sixstorage vulnerabilities
We track 3 vulnerabilities in Sixstorage products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on November 11, 2026.
Latest Sixstorage vulnerabilities
- 8.8 High severity
6Storage Rentals: Improper Authentication
The 6Storage Rentals plugin for WordPress is vulnerable to Authentication Bypass leading to Administrator Account Takeover in all versions up to, and including, 2.31.0. The vulnerability exists because the `six_storage_portal_registration()` AJAX handler — reg
- 9.8 Critical severity
6Storage Rentals: Improper Authentication
The 6Storage Rentals plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.27.0. This is due to the six_storage_create_wp_user() AJAX handler being registered on wp_ajax_nopriv_six_storage_create_wp_user without any no
- 7.5 High severity
6Storage Rentals: Authorization Bypass Through User-Controlled Key
The 6Storage Rentals plugin for WordPress is vulnerable to Authorization Bypass Through User-Controlled Key in all versions up to and including 2.22.0 via the `userId` parameter of the `six_storage_get_user_info` and `six_storage_update_profile` AJAX actions.