WordPress 6Storage Rentals plugin <= 2.20.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by thiennv in WordPress Plugin 6Storage Rentals versions = 2.20.1...