29 matches found
CVE-2026-23550
root@kitploit: ββββββββββ βββββββββββ βββββββ βββββββ βββββββ βββββββ βββββββ βββββββ ββββββββ ββββββββ βββββββ βββββββββββ βββββββββββ βββββββββββββββββββββββββββββββββ ββββββββββββββββββββββββ βββββββββββββββββ βββ βββ βββββββββ ββββββββββββββββ βββββββββββββββ βββββββ βββββββββββββββ...
Mass-CVE-2026-23550-Exploit
π₯ CVE-2026-23550 Modular DS Scanner Multi-threaded Python scanner for CVE-2026-23550 CVSS 10.0 WordPress Modular DS plugin β€2.5.1 vulnerability affecting 40k+ sites. Detects unauthenticated admin takeover via getLogin bypass with full wp-admin access verification. Features β¨ root@kitploit: π₯ Full...
CYBERDUDEBIVASH-Modular-DS-CVE-2026-23550-Detector
CYBERDUDEBIVASH Modular DS ΠΠ΅ΡΠ΅ΠΊΡΠΎΡ CVE-2026-23550 ΠΠ±Π·ΠΎΡ ΠΡΠΎ Π°Π²ΡΠΎΡΠΈΠ·ΠΎΠ²Π°Π½Π½ΡΠΉ ΠΈΠ½ΡΡΡΡΠΌΠ΅Π½Ρ ΡΠΊΠΎΡΠΈΡΡΠ΅ΠΌΡ CYBERDUDEBIVASH Π΄Π»Ρ ΠΎΠ±Π½Π°ΡΡΠΆΠ΅Π½ΠΈΡ CVE-2026-23550 Π² ΠΏΠ»Π°Π³ΠΈΠ½Π΅ WordPress Modular DS. ΠΠ½ Π½Π΅ΡΠ°Π·ΡΡΡΠ°ΡΡΠ΅ ΠΏΡΠΎΠ²Π΅ΡΡΠ΅Ρ ΡΡΠ·Π²ΠΈΠΌΡΠ΅ Π²Π΅ΡΡΠΈΠΈ = 2.5.1 ΠΏΡΡΠ΅ΠΌ Π°Π½Π°Π»ΠΈΠ·Π° ΡΠ°ΠΉΠ»Π° readme.txt ΠΏΠ»Π°Π³ΠΈΠ½Π°. ΠΠ΄Π΅Π°Π»ΡΠ½ΠΎ ΠΏΠΎΠ΄Ρ ΠΎΠ΄ΠΈΡ Π΄Π»Ρ Π°ΡΠ΄ΠΈΡΠ°...
CVE-2026-23550-PoC
CVE-2026-23550-PoC CVE-2026-23550 - Modular DS WordPress Plugin Unauthenticated Admin Access Proof-of-Concept PoC demonstrating CVE-2026-23550 - critical unauthenticated admin account takeover in Modular DS WordPress plugin versions β€2.5.1. Actively exploited in the wild. Attack Summary : Flawed...
CVE-2026-23550
CVE-2026-23550 Modular DS header'User-Agent'; $userAgentMatches = $userAgent && Str::is'ModularConnector/ Linux', $userAgent; $originQuery = $request-has'origin' && $request-get'origin' === 'mo'; $isFromQuery = $originQuery || $userAgentMatches && $request-has'type'; // When is wp-load.php reques...
EpSiLoNPoInT-
!/usr/bin/env python3 """ TSAR-EXEC v7.1 + EpSiLoNPoInTFuCK v5.1 - Complete README.md Ready to Copy-Paste CVE-2026-23550 | Massive Modular DS Auth Bypass Exploitation Framework Author: EpSiLoNPoInT | Version: 7.1-GOD | Android 24h Coding | 08/02/2026 """...
Modular DS - Broken Access Control
Modular DS = 2.5.1 contains a broken access control vulnerability caused by incorrect privilege assignment, letting attackers escalate their privileges, exploit requires no special conditions. id: CVE-2026-23550 info: name: Modular DS - Broken Access Control author: DhiyaneshDk,l46983284-cpu...
CVE-2026-3903
The Modular DS: Monitor, update, and backup multiple websites plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.5.1. This is due to missing nonce validation on the postConfirmOauth function. This makes it possible for unauthenticated attacker...
CVE-2026-3903 Modular Connector <= 2.5.1 - Cross-Site Request Forgery via postConfirmOauth
The Modular DS: Monitor, update, and backup multiple websites plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.5.1. This is due to missing nonce validation on the postConfirmOauth function. This makes it possible for unauthenticated attacker...
CVE-2026-3903
The Modular DS: Monitor, update, and backup multiple websites plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.5.1. This is due to missing nonce validation on the postConfirmOauth function. This makes it possible for unauthenticated attacker...
WordPress plugin Modular DS: Monitor, update, and backup multiple websites θ·¨η«θ―·ζ±δΌͺι ζΌζ΄
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...
Exploit for CVE-2026-23550
EpSiLoNPoInT- π΄ EpSiLoNPoInT - CVE-2026-23550 Modular DS Zero-...
Exploit for CVE-2026-23550
π₯ CVE-2026-23550 Modular DS Scanner Multi-threaded Python scan...
CVE-2026-23800
Incorrect Privilege Assignment vulnerability in Modular DS modular-connector allows Privilege Escalation.This issue affects Modular DS: from 2.5.2 before 2.6.0...
CVE-2026-23800
CVE-2026-23800 concerns the Modular DS modular-connector in WordPress Modular DS plugin versions 2.5.2 up to 2.5.9, where an incorrect privilege assignment could enable privilege escalation. Multiple sources (NVD, Red Hat, CVE list, vuln enrichment) confirm the issue and scope: affected product i...
CVE-2026-23800 WordPress Modular DS plugin <= 2.5.2 - Privilege Escalation vulnerability
Incorrect Privilege Assignment vulnerability in Modular DS modular-connector allows Privilege Escalation.This issue affects Modular DS: from 2.5.2 before 2.6.0...
CVE-2026-23800
Incorrect Privilege Assignment vulnerability in Modular DS modular-connector allows Privilege Escalation.This issue affects Modular DS: from 2.5.2 before 2.6.0...
WordPress Modular DS plugin <= 2.5.2 - Privilege Escalation vulnerability
Privilege Escalation vulnerability discovered by Dave Jong Patchstack in WordPress Plugin Modular DS versions 2.5.2...
WordPress plugin Modular DS modular-connector has a security vulnerability
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...
VulnCheck KEV: CVE-2026-23800
Incorrect Privilege Assignment vulnerability in Modular DS modular-connector allows Privilege Escalation.This issue affects Modular DS: from 2.5.2 before 2.6.0...