{"uuid": "37da5eef-876d-4204-afbb-a71729186a93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-15303", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117097642274216267", "content": "CVE-2026-15303: CRITICAL auth bypass in sixstorage 6Storage Rentals <=2.27.0. Unauthenticated attackers can impersonate any WP user via exposed AJAX handler. Restrict endpoint or disable plugin until patched. https://radar.offseq.com/threat/cve-2026-15303-cwe-287-improper-authentication-in-sixstorage-6storage-rentals-a7f565714ebb98e6 #OffSeq #WordPress #Vuln #Security", "creation_timestamp": "2026-08-15T04:30:23.961624Z"}