sangsenimanwartefak/cve-2026-23550Bash exploit for CVE-2026-23550 that triggers unauthenticated WordPress admin login via crafted REST API request to Modular Connector's /api/modular-connector/login endpoint.
Unauthenticated WordPress Admin Login via origin=mo Parameter
Modular Connector Plugin ≤ 2.5.1
The Modular Connector plugin for WordPress (versions ≤ 2.5.1) contains a critical authentication bypass vulnerability. An unauthenticated attacker can send a crafted POST request to the REST API endpoint /api/modular-connector/login with the JSON parameter . This triggers the plugin to issue a valid WordPress admin session cookie, granting full administrative access to the site.
{"origin":"mo"}CVSS Score: 9.8 (Critical)
CWE: CWE-287 (Improper Authentication)
Attack Vector: Network | Complexity: Low | Privileges: None
| Plugin | Vulnerable Versions |
|---|---|
| Modular Connector (by ModularWP) | ≤ 2.5.1 |
Note: This vulnerability has been assigned CVE-2026-23550. No official patch has been released as of the disclosure date.
chmod +x CVE-2026-23550.sh
./exploit.sh http://target.com