CVE-2025-67623
MediumCVSS 5.4Exploitation Probability (EPSS)
Low risk8th percentile - higher than 8% of all known CVEs
Summary
Server-Side Request Forgery (SSRF) vulnerability in 6Storage Rentals (up to 2.22.0) allows an attacker to send requests from the server to internal resources.
Risk Assessment
An attacker can use the server to scan the internal network, access internal services, or launch attacks on other systems.
Recommendation
Update the 6Storage Rentals plugin to the latest version that includes a fix.
Other vulnerabilities in 6Storage Rentals
See all- CVE-2026-15303Critical
The 6Storage Rentals plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.27.0. The AJAX handler lacks verification, allowing unauthenticated attackers to log in as any existing user, including administrators.
- CVE-2026-9185High
The 6Storage Rentals plugin for WordPress up to version 2.22.0 allows unauthenticated attackers to read and modify tenant profile data (including name, email, phone, address, and SSN) via the userId parameter in AJAX actions six_storage_get_user_info and six_storage_update_profile. No ownership, session, or nonce validation.
Original NVD description (English source)
Server-Side Request Forgery (SSRF) vulnerability in 6Storage 6Storage Rentals 6storage-rentals allows Server Side Request Forgery.This issue affects 6Storage Rentals: from n/a through <= 2.22.0.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS