[{"data":1,"prerenderedAt":42},["ShallowReactive",2],{"sicherheitsluecke-cve-2026-103883":3},{"l":4,"details":22,"weitere":25,"indexierbar":10,"updated":41},{"cve":5,"status":6,"vendor":7,"product":8,"name":7,"added":9,"due":7,"ransomware":10,"published":9,"cwes":11,"cvss":13,"slug":18,"bereich":19,"schweregrad":20,"art":21,"produktLabel":8},"CVE-2026-103883","gemeldet","","6Storage Rentals (WordPress-Plugin)","2026-11-11",false,[12],"CWE-287",{"version":14,"score":15,"severity":16,"vector":17},"3.1",8.8,"HIGH","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H","cve-2026-103883","web","hoch","Fehlerhafte Anmeldung (Authentifizierung)",{"description":23,"refs":24},"The 6Storage Rentals plugin for WordPress is vulnerable to Authentication Bypass leading to Administrator Account Takeover in all versions up to, and including, 2.31.0. The vulnerability exists because the `six_storage_portal_registration()` AJAX handler — registered on `wp_ajax_six_storage_portal_plugin_registration` — performs no capability check and no nonce verification before writing the caller-supplied `six_storage_online_api_url` POST parameter to the site-wide option of the same name; the unauthenticated `six_storage_create_wp_user()` handler then redeems a transient seeded from that attacker-controlled URL's response and unconditionally calls `wp_set_current_user()` and `wp_set_auth_cookie()` with no ownership or credential verification. This makes it possible for authenticated attackers, with Subscriber-level access and above, to authenticate as any existing WordPress user — including any administrator whose email address is known or guessable — resulting in full site compromise. This issue represents an incomplete fix for a prior vulnerability: the 2.29.0 remediation moved the target email out of POST data into a server-side transient, but because any Subscriber can still overwrite the outbound API URL that populates that transient, the full authentication bypass chain remains exploitable in three AJAX requests.",[],[26,32,37],{"cve":27,"status":6,"produktLabel":28,"vendor":7,"product":28,"art":29,"bereich":19,"schweregrad":30,"score":31,"epss":-1,"added":9,"ransomware":10},"CVE-2026-126542","WWBN AVideo","Umgehung der Anmeldung durch Vortäuschen einer Identität","kritisch",9.3,{"cve":33,"status":6,"produktLabel":34,"vendor":7,"product":34,"art":35,"bereich":19,"schweregrad":30,"score":36,"epss":-1,"added":9,"ransomware":10},"CVE-2026-126539","Directus","Unsicherer Zustand nach Fehlern",9.2,{"cve":38,"status":6,"produktLabel":39,"vendor":7,"product":39,"art":40,"bereich":19,"schweregrad":20,"score":15,"epss":-1,"added":9,"ransomware":10},"CVE-2026-119615","Reset Database (WordPress-Plugin)","Fehlerhafte Verwaltung von Rechten","2026-11-11T14:28:43.107Z",1794407350107]