Description
Incorrect Privilege Assignment vulnerability in Modular DS Modular DS modular-connector allows Privilege Escalation.This issue affects Modular DS: from n/a through <= 2.5.1.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Modular DS | Modular DS | ≤ 2.5.1 | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
GitHub 8 repositories
-
dzmind2312/Mass-CVE-2026-23550-Exploit ★ 2 · Feb 7, 2026
Mass CVE-2026-23550 Exploit
-
1beelze/CVE-2026-23550 ★ 1 · Jul 5, 2026
-
DedsecTeam-BlackHat/CVE-2026-23550 ★ 1 · Feb 26, 2026
-
epsilonpoint88-glitch/EpSiLoNPoInT- ★ 1 · Feb 10, 2026
🔴 EpSiLoNPoInT - CVE-2026-23550 Modular DS Zero-Click **Framework d'exploitation Modular DS Admin Bypass** ## 🎯 CVE Ciblée Principale **CVE-2026-23550** : Modular DS WordPress Plugin - 40 000+ sites …
-
TheTorjanCaptain/CVE-2026-23550-PoC ★ 1 · Jan 17, 2026
CVE-2026-23550 - Modular DS WordPress Plugin **Unauthenticated Admin Access**
-
cyberdudebivash/CYBERDUDEBIVASH-Modular-DS-CVE-2026-23550-Detector ★ 1 · Jan 15, 2026
authorized CYBERDUDEBIVASH ECOSYSTEM tool for detecting CVE-2026-23550 in WordPress Modular DS plugin
-
baktistr/cve-2026-23550-poc ★ 0 · Jul 20, 2026
-
SangSenimanWartefak/CVE-2026-23550 ★ 0 · Jun 11, 2026
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Modular DS - Broken Access Control http/cves/2026/CVE-2026-23550.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.