Skip to content
OpenAdvisories

Archive

14 January 2026

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Critical 10.0
    CVE-2026-23550 Public exploit Scanner template EPSS 21%

    WordPress Modular DS plugin <= 2.5.1 - Privilege Escalation vulnerability

    Incorrect Privilege Assignment vulnerability in Modular DS Modular DS modular-connector allows Privilege Escalation.This issue affects Modular DS: from n/a through <= 2.5.1.

  • Critical 9.8
    CVE-2025-14502 Public exploit

    News and Blog Designer Bundle <= 1.1 - Unauthenticated Local File Inclusion

    The News and Blog Designer Bundle plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.1 via the template parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files…