Modular DS

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Modular DS records in CISA KEV

No Modular DS vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-18972 CVE-2026-23550 · GHSA-7hjg-42gh-8j3v

WordPress Modular DS plugin <= 2.5.1 - Privilege Escalation vulnerability

HIGH 68

Incorrect Privilege Assignment vulnerability in Modular DS Modular DS modular-connector allows Privilege Escalation.This issue affects Modular DS: from n/a through <= 2.5.1.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.21393 Published 2026-01-14 No fix listed CWE-266

TI-2026-03373 CVE-2026-3903 · GHSA-6qpq-j4q7-x5cr

Modular Connector <= 2.5.1 - Cross-Site Request Forgery via postConfirmOauth

LOW 19

The Modular DS: Monitor, update, and backup multiple websites plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.5.1.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00122 Published 2026-03-11 No fix listed CWE-352

Open these records in search →

Critical	1
High	0
Medium	1
Low	0
No CVSS	0