6Storage Rentals
6Storage Rentals has 6 disclosed vulnerabilities in the WordSec catalog, reported between 2025 and 2026; 1 is fixed and 5 remain unpatched as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 1 high. 2025 was the busiest year with 4 disclosures.
The most common weakness is Missing Authorization, behind 3 of the records (50%). Other recurring categories include Authorization Bypass Through User-Controlled Key, Improper Authentication.
1 of the records (17%) have a vendor fix, while 5 remain unpatched. The oldest unresolved one dates back to 2025.
6 independent researchers contributed these findings, one record each. 6Storage Rentals is installed on roughly 20 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.
CVE-2026-91856Storage Rentals <= 2.22.0 - Unauthenticated Insecure Direct Object Reference to Arbitrary User Disclosure and Modification via 'userId' Parameter
Read the full analysisVulnerability Records
6Storage Rentals
Author
6Storage
6Storage Rentals is an easy-to-use, straightforward plugin that allows onboarding tenants to book their required storage/facility on your website. Serving in 40+ countries worldwide, 6Storage offers a range of products and each product is unique and versatile in its own way. 6Storage Rentals is a free version of the plugin provided by 6Storage. Experience the efficiency of our easy-to-install plugin, customize as per your business and simplify tasks for your tenants. Installing premium 6Storage plugin facilitates embedding these functionalities to your website: Book/Rent units directly Access to lease information View summary of invoices and transactions Process payments, add/edit card details for payments 6Storage management software and premium plugin supports various storage types as below. Self-Storage RV/Boat Storage Vehicle Storage Containers Storage Car Storage Lock-Ups Storage Drive-Up Storage Mobile self-storage Reach us at help@6storage.com for premium plugin and management portal demo and support. For more details, visit 6storage.com Free version: Leads Free Shortcodes: [six-storage-enquiry-form] --> Leads Premium version: 1. Dynamic unit display 2. Filter and sort by 3. Online move-in 4. Payment integration 5. Pay later 6. Move-in approval 7. Reservation 8. Group units by size 9. Insurance integration 10. Custom fields 11. Services 12. Merchandise 13. Move-in approval Premium Shortcodes: When request to connect 6storage API raised, pages with below shortcodes will be genared automatically. [six_storage_online_storage_move_in_shortcode_form] –> Move In [six_storage_online_dashboard] –> Dashboard [six_storage_online_sign_in] –> Sign In [six_storage_online_sign_up] –> Sign Up [six_storage_online_storage_thank_you_page] –> Thank You
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C