A critical authentication bypass vulnerability in the 6Storage Rentals WordPress plugin allows unauthenticated attackers to gain administrative access to the site.

The AJAX handler six_storage_create_wp_user lacks necessary security checks, including nonces and capability verification. An attacker can exploit this to impersonate any user on the system simply by providing their email address, resulting in full authentication bypass.

Unauthorized administrative access allows an attacker to take complete control of the WordPress instance, including modifying content, stealing sensitive user information, and injecting malicious code. With a CVSS score of 9.8, this vulnerability represents a severe risk to the entire site infrastructure and all stored data.

Immediate Action: Disable or uninstall the 6Storage Rentals plugin until a patched version is released by the vendor.

Proactive Monitoring: Audit WordPress user logs for suspicious login activity or unexpected changes to administrative accounts.

Compensating Controls: Ensure that WordPress security best practices are in place, such as limited access to the wp-admin directory and robust monitoring of AJAX requests.

Public Exploit Available: Unknown

Due to the extreme risk posed by unauthorized administrative access, the plugin should be disabled immediately. Security teams must remain vigilant and monitor for the release of a security update from the vendor to restore functionality safely.