https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Tue, 18 Aug 2026 21:51:42 +0000 https://vulnerability.circl.lu/sighting/63e5041e-eb2d-490d-8a23-f6c6e5e2ca97/export {"uuid": "63e5041e-eb2d-490d-8a23-f6c6e5e2ca97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15303", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jx3zpdnbusjwl", "content": "CVE-2026-15303 - 6Storage Rentals\nCVE ID : CVE-2026-15303\n \n Published : Aug. 15, 2026, 3:16 a.m. | 56\u00a0minutes ago\n \n Description : The 6Storage Rentals plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.27.0. This is due to the six...", "creation_timestamp": "2026-08-15T04:56:32.938816Z"} {"uuid": "63e5041e-eb2d-490d-8a23-f6c6e5e2ca97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15303", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jx3zpdnbusjwl", "content": "CVE-2026-15303 - 6Storage Rentals\nCVE ID : CVE-2026-15303\n \n Published : Aug. 15, 2026, 3:16 a.m. | 56\u00a0minutes ago\n \n Description : The 6Storage Rentals plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.27.0. This is due to the six...", "creation_timestamp": "2026-08-15T04:56:32.938816Z"} https://vulnerability.circl.lu/sighting/63e5041e-eb2d-490d-8a23-f6c6e5e2ca97/export Sat, 15 Aug 2026 04:56:32 +0000 https://vulnerability.circl.lu/sighting/fc4b4fed-4db7-447e-ab02-8398ce1bec62/export {"uuid": "fc4b4fed-4db7-447e-ab02-8398ce1bec62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-15303", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mt3tmp2nqo2f", "content": "CRITICAL vulnerability in sixstorage 6Storage Rentals <=2.27.0: Auth bypass lets attackers impersonate any WP user \u2014 including admins. Restrict or disable plugin until a fix is available. Details: https://radar.offseq.com/threat/cve-2026-15303-cwe-287-improper-authentication-in-sixstorage-6storag...", "creation_timestamp": "2026-08-15T04:30:26.256197Z"} {"uuid": "fc4b4fed-4db7-447e-ab02-8398ce1bec62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-15303", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mt3tmp2nqo2f", "content": "CRITICAL vulnerability in sixstorage 6Storage Rentals <=2.27.0: Auth bypass lets attackers impersonate any WP user \u2014 including admins. Restrict or disable plugin until a fix is available. Details: https://radar.offseq.com/threat/cve-2026-15303-cwe-287-improper-authentication-in-sixstorage-6storag...", "creation_timestamp": "2026-08-15T04:30:26.256197Z"} https://vulnerability.circl.lu/sighting/fc4b4fed-4db7-447e-ab02-8398ce1bec62/export Sat, 15 Aug 2026 04:30:26 +0000 https://vulnerability.circl.lu/sighting/37da5eef-876d-4204-afbb-a71729186a93/export {"uuid": "37da5eef-876d-4204-afbb-a71729186a93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-15303", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117097642274216267", "content": "CVE-2026-15303: CRITICAL auth bypass in sixstorage 6Storage Rentals <=2.27.0. Unauthenticated attackers can impersonate any WP user via exposed AJAX handler. Restrict endpoint or disable plugin until patched. https://radar.offseq.com/threat/cve-2026-15303-cwe-287-improper-authentication-in-sixstorage-6storage-rentals-a7f565714ebb98e6 #OffSeq #WordPress #Vuln #Security", "creation_timestamp": "2026-08-15T04:30:23.961624Z"} {"uuid": "37da5eef-876d-4204-afbb-a71729186a93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-15303", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117097642274216267", "content": "CVE-2026-15303: CRITICAL auth bypass in sixstorage 6Storage Rentals <=2.27.0. Unauthenticated attackers can impersonate any WP user via exposed AJAX handler. Restrict endpoint or disable plugin until patched. https://radar.offseq.com/threat/cve-2026-15303-cwe-287-improper-authentication-in-sixstorage-6storage-rentals-a7f565714ebb98e6 #OffSeq #WordPress #Vuln #Security", "creation_timestamp": "2026-08-15T04:30:23.961624Z"} https://vulnerability.circl.lu/sighting/37da5eef-876d-4204-afbb-a71729186a93/export Sat, 15 Aug 2026 04:30:23 +0000 https://vulnerability.circl.lu/sighting/3915c9d5-8ab8-47ef-bbfc-dcf6bf808424/export {"uuid": "3915c9d5-8ab8-47ef-bbfc-dcf6bf808424", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15303", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt3p52ojm42f", "content": "CVE-2026-15303 - 6storage rentals\nThe 6Storage Rentals plugin for WordPress allows unauthorized access to any WordPress account, including administrator accounts. This means an attacker can log in\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#6storagerentals #sixstorage #CVE #infosec", "creation_timestamp": "2026-08-15T03:10:05.773730Z"} {"uuid": "3915c9d5-8ab8-47ef-bbfc-dcf6bf808424", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15303", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt3p52ojm42f", "content": "CVE-2026-15303 - 6storage rentals\nThe 6Storage Rentals plugin for WordPress allows unauthorized access to any WordPress account, including administrator accounts. This means an attacker can log in\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#6storagerentals #sixstorage #CVE #infosec", "creation_timestamp": "2026-08-15T03:10:05.773730Z"} https://vulnerability.circl.lu/sighting/3915c9d5-8ab8-47ef-bbfc-dcf6bf808424/export Sat, 15 Aug 2026 03:10:05 +0000