Authorization Bypass in 6Storage Rentals Plugin for WordPress

CVE-2026-9185

What is CVE-2026-9185?

The 6Storage Rentals plugin for WordPress has a vulnerability that allows unauthorized access to user data. This occurs through an improper handling of the userId parameter in the AJAX actions six_storage_get_user_info and six_storage_update_profile. The registration of these functions on wp_ajax_nopriv_* hooks enables unauthenticated attackers to craft requests supplying an enumerated userId, bypassing necessary ownership verification and session validation. As a result, attackers can read and modify sensitive profile data such as names, email addresses, phone numbers, physical addresses, and social security numbers of any tenant.

References