Lucene search
+L

29 matches found

Kitploit
Kitploit
added 2026/08/27 6:33 a.m.2 views

Mass-CVE-2026-23550-Exploit

🔥 CVE-2026-23550 Scanner Modulare DS Scanner Python multi-thread per CVE-2026-23550 CVSS 10.0 vulnerabilità del plugin WordPress Modular DS ≤2.5.1 che colpisce oltre 40.000 siti. Rileva il takeover admin non autenticato tramite bypass di getLogin con verifica completa dell'accesso a wp-admin...

9.8CVSS5.8AI score0.20631EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/08/27 6:09 a.m.2 views

CYBERDUDEBIVASH-Modular-DS-CVE-2026-23550-Detector

CYBERDUDEBIVASH Modular DS CVE-2026-23550 Detector Überblick Dies ist ein autorisiertes CYBERDUDEBIVASH ECOSYSTEM-Tool zur Erkennung von CVE-2026-23550 im WordPress Modular DS Plugin. Es prüft nicht-destruktiv auf verwundbare Versionen = 2.5.1, indem es die readme.txt des Plugins analysiert. Idea...

9.8CVSS5.6AI score0.20631EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/08/27 4:58 a.m.2 views

CVE-2026-23550-PoC

CVE-2026-23550-PoC CVE-2026-23550 - Modular DS WordPress Plugin Unauthentifizierter Admin-Zugriff Proof-of-Concept PoC , das CVE-2026-23550 demonstriert – kritische Übernahme von Admin-Konten ohne Authentifizierung im Modular DS WordPress-Plugin Versionen ≤2.5.1. Wird aktiv in freier Wildbahn...

9.8CVSS5.8AI score0.20631EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/08/27 3:41 a.m.7 views

CVE-2026-23550

CVE-2026-23550 Modular DS header'User-Agent'; $userAgentMatches = $userAgent && Str::is'ModularConnector/ Linux', $userAgent; $originQuery = $request-has'origin' && $request-get'origin' === 'mo'; $isFromQuery = $originQuery || $userAgentMatches && $request-has'type'; // When is wp-load.php reques...

9.8CVSS5.8AI score0.20631EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/08/27 2:30 a.m.3 views

EpSiLoNPoInT-

!/usr/bin/env python3 """ TSAR-EXEC v7.1 + EpSiLoNPoInTFuCK v5.1 - README.md Vollständig und Kopierbereit CVE-2026-23550 | Framework für Massen-Exploitation Modular DS Auth Bypass Autor: EpSiLoNPoInT | Version: 7.1-GOD | Android 24h Coding | 08/02/2026 """...

9.8CVSS6.3AI score0.20631EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/08/26 10:14 p.m.3 views

CVE-2026-23550

root@kitploit: ██████╗██╗ ██╗███████╗ ██████╗ ██████╗ ██████╗ ██████╗ ██████╗ ██████╗ ███████╗ ███████╗ ██████╗ ██╔════╝██║ ██║██╔════╝ ╚════██╗██╔═████╗╚════██╗██╔════╝ ╚════██╗╚════██╗██╔════╝ ██╔════╝██╔═████╗ ██║ ██║ ██║█████╗ █████╔╝██║██╔██║ █████╔╝███████╗ █████╔╝ █████╔╝███████╗...

9.8CVSS6.2AI score0.20631EPSS
SaveExploits9
Nuclei
Nuclei
added 2026/07/17 4:44 a.m.22 views

Modular DS - Broken Access Control

Modular DS = 2.5.1 contains a broken access control vulnerability caused by incorrect privilege assignment, letting attackers escalate their privileges, exploit requires no special conditions. id: CVE-2026-23550 info: name: Modular DS - Broken Access Control author: DhiyaneshDk,l46983284-cpu...

9.8CVSS5.7AI score0.20631EPSS
SaveExploits9References2
RedhatCVE
RedhatCVE
added 2026/03/26 3:12 p.m.12 views

CVE-2026-3903

The Modular DS: Monitor, update, and backup multiple websites plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.5.1. This is due to missing nonce validation on the postConfirmOauth function. This makes it possible for unauthenticated attacker...

4.3CVSS5.8AI score0.00104EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/03/11 7:36 a.m.6 views

CVE-2026-3903 Modular Connector <= 2.5.1 - Cross-Site Request Forgery via postConfirmOauth

The Modular DS: Monitor, update, and backup multiple websites plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.5.1. This is due to missing nonce validation on the postConfirmOauth function. This makes it possible for unauthenticated attacker...

4.3CVSS5.6AI score0.00104EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/03/11 7:36 a.m.8 views

CVE-2026-3903

The Modular DS: Monitor, update, and backup multiple websites plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.5.1. This is due to missing nonce validation on the postConfirmOauth function. This makes it possible for unauthenticated attacker...

4.3CVSS5.6AI score0.00104EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/03/11 12:00 a.m.17 views

WordPress plugin Modular DS: Monitor, update, and backup multiple websites 跨站请求伪造漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

4.3CVSS5.7AI score0.00104EPSS
SaveExploits0References2
GithubExploit
GithubExploit
added 2026/02/10 12:33 p.m.216 views

Exploit for CVE-2026-23550

EpSiLoNPoInT- 🔴 EpSiLoNPoInT - CVE-2026-23550 Modular DS Zero-...

10CVSS5.5AI score0.20631EPSS
SaveExploits9
GithubExploit
GithubExploit
added 2026/02/07 5:16 p.m.215 views

Exploit for CVE-2026-23550

🔥 CVE-2026-23550 Modular DS Scanner Multi-threaded Python scan...

10CVSS5.4AI score0.20631EPSS
SaveExploits9
NVD
NVD
added 2026/01/16 9:15 p.m.10 views

CVE-2026-23800

Incorrect Privilege Assignment vulnerability in Modular DS modular-connector allows Privilege Escalation.This issue affects Modular DS: from 2.5.2 before 2.6.0...

10CVSS0.00477EPSS
SaveExploits0References1
CVE
CVE
added 2026/01/16 8:40 p.m.57 views

CVE-2026-23800

CVE-2026-23800 concerns the Modular DS modular-connector in WordPress Modular DS plugin versions 2.5.2 up to 2.5.9, where an incorrect privilege assignment could enable privilege escalation. Multiple sources (NVD, Red Hat, CVE list, vuln enrichment) confirm the issue and scope: affected product i...

10CVSS6.6AI score0.00477EPSS
SaveIn wildExploits0References1
Cvelist
Cvelist
added 2026/01/16 8:40 p.m.31 views

CVE-2026-23800 WordPress Modular DS plugin <= 2.5.2 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in Modular DS modular-connector allows Privilege Escalation.This issue affects Modular DS: from 2.5.2 before 2.6.0...

10CVSS0.00477EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/16 8:40 p.m.3 views

CVE-2026-23800

Incorrect Privilege Assignment vulnerability in Modular DS modular-connector allows Privilege Escalation.This issue affects Modular DS: from 2.5.2 before 2.6.0...

10CVSS5.3AI score0.00477EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2026/01/16 7:40 p.m.15 views

WordPress Modular DS plugin <= 2.5.2 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Dave Jong Patchstack in WordPress Plugin Modular DS versions 2.5.2...

10CVSS7AI score0.00477EPSS
SaveExploits0References1Affected Software1
VulnCheck KEV
VulnCheck KEV
added 2026/01/16 12:00 a.m.6 views

VulnCheck KEV: CVE-2026-23800

Incorrect Privilege Assignment vulnerability in Modular DS modular-connector allows Privilege Escalation.This issue affects Modular DS: from 2.5.2 before 2.6.0...

10CVSS5.8AI score0.00477EPSS
SaveIn wildExploits0References4
CNNVD
CNNVD
added 2026/01/16 12:00 a.m.13 views

WordPress plugin Modular DS modular-connector has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

10CVSS5.7AI score0.00477EPSS
SaveExploits0References1
Rows per page
Query Builder