CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2025-67623

WordPress 6Storage Rentals plugin <= 2.22.0 - Server Side Request Forgery (SSRF) vulnerability

Status: Published
Published: 2025-12-24
Updated: 2026-04-28
Assigning organization: Patchstack

Description

Server-Side Request Forgery (SSRF) vulnerability in 6Storage 6Storage Rentals 6storage-rentals allows Server Side Request Forgery.This issue affects 6Storage Rentals: from n/a through <= 2.22.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

6Storage 6Storage Rentals

Default version status: unaffected

0 to ≤ 2.22.0affected

References

https://patchstack.com/database/Wordpress/Plugin/6storage-rentals/vulnerability/wordpress-6storage-rentals-plugin-2-19-9-server-side-request-forgery-ssrf-vulnerability?_s_id=cve ↗