anggatechi/mass-scanner-cve-2026-2631Async mass-checker for authorized internal testing of CVE-2026-2631 exposure.
Private async mass-checker for internal WordPress validation
This tool performs a destructive validation.
It sends a POST request to the target endpoint and may change
shop_secreton vulnerable targets.Use it only on systems you own or are explicitly authorized to test.
This project is a lightweight asynchronous mass-checker built for private validation of CVE-2026-2631 exposure on owned WordPress targets and subdomains.
The scanner is designed to:
This repository is intended for private/internal use only.
aiohttpvuln_results.txtrich is installedThe scanner sends a request to:
/wp-json/gsf/v1/update-options
It uses a POST request with the following validation fields:
action=resetStoreConfigrationsshop_secret=<custom or default value>A target is marked as vulnerable when:
200, andThe scanner also applies a simple error-pattern filter to reduce obvious false positives.
aiohttprich (optional, for colored output)Install dependencies:
pip install aiohttp rich
Prepare your target file, for example list.txt:
example.com
sub.example.com
https://app.example.com
http://dev.example.com
Run the scanner:
python main.py
The script will prompt for:
YES)shop_secret valueDefault values include:
list.txt2010 seconds #####################################################################
# CVE-2026-2631 Scanner - Async Mass Checker (Author AnggaTechI) #
# Only vulnerable targets will be shown and logged. #
# WARNING: This test CHANGES shop_secret on vulnerable #
# sites. Use only with permission. #
# https://github.com/AnggaTechI #
#####################################################################
⚠️ DESTRUCTIVE OPERATION WARNING
This script will change shop_secret on vulnerable sites.
Scanning 250 targets with 20 concurrent requests...
Only vulnerable sites will appear below.
https://target.tld -> Vuln Found
https://sub.target.tld -> Vuln Found
[Progress] 50/250 scanned...
[Progress] 100/250 scanned...
=== Scan Complete ===
Total targets : 250
Vulnerable found : 2
Errors (by type) :
- timeout: 4
- connection: 7
Positive findings are saved to:
vuln_results.txt
Only targets identified as vulnerable are written to the result file.
This repository is maintained for private research and internal validation purposes only.
The author is not responsible for misuse, unauthorized scanning, service disruption, or configuration changes caused by improper operation of this tool.
Use responsibly. Use carefully. Use only with permission.
AnggaTechI
Private security tooling for internal workflows.