Critical Word Press Modular DS Plugin Flaw Actively Exploited to Gain Admin Access
Patchstack reports active exploitation of CVE-2026-23550, a CVSS 10.0 unauthenticated privilege escalation in the WordPress plugin Modular DS affecting all versions up to and including 2.5.1 and patched in 2.5.2, which has more than 40,000 active installs....