PT-2026-2847

🗓️ 14 Jan 2026 00:00:00Reported by Positive TechnologiesType

Incorrect privilege assignment in Modular Data System enables privilege escalation across versions up to 2.5.1.

Reporter	Title	Published	Views	Family All 20
GithubExploit	Exploit for CVE-2026-23550	7 Feb 202617:16	–	githubexploit
GithubExploit	Exploit for CVE-2026-23550	10 Feb 202612:33	–	githubexploit
GithubExploit	Exploit for CVE-2026-23550	15 Jan 202617:23	–	githubexploit
GithubExploit	Exploit for CVE-2026-23550	26 Feb 202615:40	–	githubexploit
GithubExploit	Exploit for CVE-2025-8489	17 Jan 202602:59	–	githubexploit
GithubExploit	Exploit for CVE-2026-23550	28 Jan 202611:06	–	githubexploit
Circl	CVE-2026-23550	14 Jan 202609:40	–	circl
CNNVD	WordPress plugin Modular DS 安全漏洞	14 Jan 202600:00	–	cnnvd
CVE	CVE-2026-23550	14 Jan 202608:44	–	cve
Cvelist	CVE-2026-23550 WordPress Modular DS plugin <= 2.5.1 - Privilege Escalation vulnerability	14 Jan 202608:44	–	cvelist

Source	Link
patchstack	www.patchstack.com/articles/critical-privilege-escalation-vulnerability-in-modular-ds-plugin-affecting-40k-sites-exploited-in-the-wild
twitter	www.twitter.com/TweetThreatNews/status/2012351722576924916
twitter	www.twitter.com/mynameisv_/status/2013585370953163177
patchstack	www.patchstack.com/database/wordpress/plugin/modular-connector/vulnerability/wordpress-modular-ds-monitor-update-and-backup-multiple-websites-plugin-2-5-1-privilege-escalation-vulnerability
reddit	www.reddit.com/r/Wordpress/comments/1rzvpax/it_seems_like_automatic_wordpress_updates_are
twitter	www.twitter.com/securityRSS/status/2012126323712409868
twitter	www.twitter.com/ox0ffff/status/2012681386751050022
twitter	www.twitter.com/lyrie_ai/status/2054629303057314228
help	www.help.modulards.com/en/article/modular-ds-security-release-modular-connector-252-dm3mv0
twitter	www.twitter.com/TrueBharatX/status/2011826219537613103

13 May 2026 00:00Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.19.8

EPSS0.04525

SSVC