https://vulnerability.circl.lu/sightings/feed 2026-08-18T21:51:41.997800+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/63e5041e-eb2d-490d-8a23-f6c6e5e2ca97/export 2026-08-18T21:51:42.018662+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "63e5041e-eb2d-490d-8a23-f6c6e5e2ca97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15303", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jx3zpdnbusjwl", "content": "CVE-2026-15303 - 6Storage Rentals\nCVE ID : CVE-2026-15303\n \n Published : Aug. 15, 2026, 3:16 a.m. | 56\u00a0minutes ago\n \n Description : The 6Storage Rentals plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.27.0. This is due to the six...", "creation_timestamp": "2026-08-15T04:56:32.938816Z"} 2026-08-15T04:56:32.938816+00:00 https://vulnerability.circl.lu/sighting/fc4b4fed-4db7-447e-ab02-8398ce1bec62/export 2026-08-18T21:51:42.020801+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "fc4b4fed-4db7-447e-ab02-8398ce1bec62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-15303", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mt3tmp2nqo2f", "content": "CRITICAL vulnerability in sixstorage 6Storage Rentals <=2.27.0: Auth bypass lets attackers impersonate any WP user \u2014 including admins. Restrict or disable plugin until a fix is available. Details: https://radar.offseq.com/threat/cve-2026-15303-cwe-287-improper-authentication-in-sixstorage-6storag...", "creation_timestamp": "2026-08-15T04:30:26.256197Z"} 2026-08-15T04:30:26.256197+00:00 https://vulnerability.circl.lu/sighting/37da5eef-876d-4204-afbb-a71729186a93/export 2026-08-18T21:51:42.020943+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "37da5eef-876d-4204-afbb-a71729186a93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-15303", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117097642274216267", "content": "CVE-2026-15303: CRITICAL auth bypass in sixstorage 6Storage Rentals <=2.27.0. Unauthenticated attackers can impersonate any WP user via exposed AJAX handler. Restrict endpoint or disable plugin until patched. https://radar.offseq.com/threat/cve-2026-15303-cwe-287-improper-authentication-in-sixstorage-6storage-rentals-a7f565714ebb98e6 #OffSeq #WordPress #Vuln #Security", "creation_timestamp": "2026-08-15T04:30:23.961624Z"} 2026-08-15T04:30:23.961624+00:00 https://vulnerability.circl.lu/sighting/3915c9d5-8ab8-47ef-bbfc-dcf6bf808424/export 2026-08-18T21:51:42.021059+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "3915c9d5-8ab8-47ef-bbfc-dcf6bf808424", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15303", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt3p52ojm42f", "content": "CVE-2026-15303 - 6storage rentals\nThe 6Storage Rentals plugin for WordPress allows unauthorized access to any WordPress account, including administrator accounts. This means an attacker can log in\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#6storagerentals #sixstorage #CVE #infosec", "creation_timestamp": "2026-08-15T03:10:05.773730Z"} 2026-08-15T03:10:05.773730+00:00