{"vulnerability": "cve-2026-15303", "sightings": [{"uuid": "3915c9d5-8ab8-47ef-bbfc-dcf6bf808424", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15303", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt3p52ojm42f", "content": "CVE-2026-15303 - 6storage rentals\nThe 6Storage Rentals plugin for WordPress allows unauthorized access to any WordPress account, including administrator accounts. This means an attacker can log in\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#6storagerentals #sixstorage #CVE #infosec", "creation_timestamp": "2026-08-15T03:10:05.773730Z"}, {"uuid": "37da5eef-876d-4204-afbb-a71729186a93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-15303", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117097642274216267", "content": "CVE-2026-15303: CRITICAL auth bypass in sixstorage 6Storage Rentals <=2.27.0. Unauthenticated attackers can impersonate any WP user via exposed AJAX handler. Restrict endpoint or disable plugin until patched. https://radar.offseq.com/threat/cve-2026-15303-cwe-287-improper-authentication-in-sixstorage-6storage-rentals-a7f565714ebb98e6 #OffSeq #WordPress #Vuln #Security", "creation_timestamp": "2026-08-15T04:30:23.961624Z"}, {"uuid": "fc4b4fed-4db7-447e-ab02-8398ce1bec62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-15303", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mt3tmp2nqo2f", "content": "CRITICAL vulnerability in sixstorage 6Storage Rentals <=2.27.0: Auth bypass lets attackers impersonate any WP user \u2014 including admins. Restrict or disable plugin until a fix is available. Details: https://radar.offseq.com/threat/cve-2026-15303-cwe-287-improper-authentication-in-sixstorage-6storag...", "creation_timestamp": "2026-08-15T04:30:26.256197Z"}, {"uuid": "63e5041e-eb2d-490d-8a23-f6c6e5e2ca97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15303", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jx3zpdnbusjwl", "content": "CVE-2026-15303 - 6Storage Rentals\nCVE ID : CVE-2026-15303\n \n Published : Aug. 15, 2026, 3:16 a.m. | 56\u00a0minutes ago\n \n Description : The 6Storage Rentals plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.27.0. This is due to the six...", "creation_timestamp": "2026-08-15T04:56:32.938816Z"}]}