CVE-2026-23550

🧨 CVE-2026-23550 – Modular Connector 管理员绕过 通过origin=mo 参数实现未认证 WordPress 管理员登录 Modular Connector 插件 ≤ 2.5.1 📖 描述 WordPress 的 Modular Connector 插件（版本 ≤ 2.5.1 ）包含一个严重的身份验证绕过漏洞。未认证的攻击者可以向 REST API 端点 /api/modular-connector/login 发送带有 JSON 参数 "origin":"mo" 的特制 POST 请求，从而触发插件签发有效的 WordPress 管理员会话...

cve-2026-23550-poc

CVE-2026-23550 PoC CVE-2026-23550 用の小さな Bash テスターです。影響を受ける WordPress モジュラーコネクタのログインエンドポイントにリクエストを送信し、wordpressloggedin クッキーが発行されるかどうかを確認し、管理ダッシュボードへのアクセスを確認しようとします。 警告: このツールは、所有しているシステム、またはテストする明示的な許可があるシステムに対してのみ使用してください。許可されていないセキュリティテストは違法であり、混乱を引き起こす可能性があります。 Requirements Bash 4+ curl grep...

Modular DS - Broken Access Control

Modular DS = 2.5.1 contains a broken access control vulnerability caused by incorrect privilege assignment, letting attackers escalate their privileges, exploit requires no special conditions. id: CVE-2026-23550 info: name: Modular DS - Broken Access Control author: DhiyaneshDk,l46983284-cpu...

Exploit for CVE-2026-23550

🧨 CVE-2026-23550 – Modular Connector Admin Bypass Unauthentic...

CVE-2026-3903

CVE-2026-3903 concerns the Modular DS: Monitor, update, and backup multiple websites plugin for WordPress (Modular Connector

CVE-2026-3903 Modular Connector <= 2.5.1 - Cross-Site Request Forgery via postConfirmOauth

The Modular DS: Monitor, update, and backup multiple websites plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.5.1. This is due to missing nonce validation on the postConfirmOauth function. This makes it possible for unauthenticated attacker...

WordPress Modular Connector plugin <= 2.5.1 - Cross-Site Request Forgery via postConfirmOauth vulnerability

Cross-Site Request Forgery via postConfirmOauth vulnerability discovered by Dmitrii Ignatyev - CleanTalk Inc in WordPress Plugin Modular DS versions = 2.5.1...

CVE-2026-23800

Incorrect Privilege Assignment vulnerability in Modular DS modular-connector allows Privilege Escalation.This issue affects Modular DS: from 2.5.2 before 2.6.0...

CVE-2026-23800

Incorrect Privilege Assignment vulnerability in Modular DS modular-connector allows Privilege Escalation.This issue affects Modular DS: from 2.5.2 before 2.6.0...

CVE-2026-23800

Incorrect Privilege Assignment vulnerability in Modular DS modular-connector allows Privilege Escalation.This issue affects Modular DS: from 2.5.2 before 2.6.0...

WordPress plugin Modular DS modular-connector has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

VulnCheck KEV: CVE-2026-23550

Incorrect Privilege Assignment vulnerability in Modular DS Modular DS modular-connector allows Privilege Escalation.This issue affects Modular DS: from n/a through = 2.5.1...