Automatically translated.View original post

A vulnerability was found on Wordpress' Modular DS plug-in.

A vulnerability was found on Wordpress' Modular DS plug-in, conducive to hackers seizing the site.

WordPress may be a tool for building websites that are popular with a lot of support tools, but at the same time, it also has a lot of security weaknesses.

According to a report by The Hacker News website, a vulnerability has been detected on Wordpress's plug-in called Modular DS, a plug-in that helps manage things on Wordpress to make it easier. This plug-in has more than 40 thousand downloads at the present time, so it is considered a fairly popular plug-in. For such a vulnerability, it is coded CVE-2026-23550 with the highest level of seriousness because it has received a CVSS rating, which measures the seriousness of a security vulnerability of up to 10.0. This vulnerability opens a channel for the aggressor. The right to access the system can be upgraded without the permission of the real administrator. This vulnerability covers users of the plug-in in all versions, including version 2.5.1.

This vulnerability occurs in a routing mechanism or Routing Mechanics that normally provides a vulnerable route in a framework that requires authentication every time under the prefix "/ api / modular-connector," but the problem is that this layer of security can be evaded when the mode of direct request traffic or "Direct Request" is enabled by setting the "Origin" parameter to "Mo" and the "Type" parameter to any value, such as "origin = mo & type = xxx." Setting a parameter like this makes the routing mechanism understand that the request came directly from the Modular DS plugin.

This allows hackers who access websites that use Modular DS to access sensitive routes such as / login /, / server-information /, / manager /, and / backup /. This will result in hackers being able to easily steal data or use stolen data to gain control of websites. This vulnerability has been detected in the past 13 January, with the victim site receiving an HTTP GET request from the IP number 45.11.89 [.] 19 and 185.196.0. [.] 11 Endpoints "/ api / modular-connector / login /" followed by an attempt to create an Admin account (Admin or Administrator) clearly illustrates the danger of this security vulnerability.

The source has warned those who use the plug-in to update the plug-in to the latest version immediately and check if there is a foreign account or administrator on the system. If it is detected, follow these steps.

Instead, create WordPress Salts, which will help to automatically undo various Session applications immediately.

Create a new OAuth code.

Scan the website for unusual files, plug-ins, or codes.

# Trending # Lemon 8 Howtoo # lemon 8 diary # Wordpress # freedomhack

2/7 Edited to

... Read moreจากประสบการณ์การดูแลเว็บไซต์ Wordpress ส่วนตัว การพบช่องโหว่บนปลั๊กอินต่าง ๆ นับเป็นเรื่องที่ผู้ดูแลระบบต้องใส่ใจอย่างมาก เพราะปลั๊กอินเหล่านี้แม้จะช่วยเพิ่มฟังก์ชันทำให้การจัดการเว็บไซต์ง่ายขึ้น แต่ก็เสี่ยงต่อการถูกโจมตีหากไม่ดูแลอย่างเหมาะสม กรณีช่องโหว่ CVE-2026-23550 บนปลั๊กอิน Modular DS ที่กล่าวถึงนี้ ผมขอแชร์วิธีป้องกันเบื้องต้นที่แนะนำให้เจ้าของเว็บไซต์ Wordpress ทำตามอย่างเข้มข้นครับ อย่างแรกเลยคือต้องเช็คว่าปลั๊กอิน Modular DS ที่ใช้เป็นเวอร์ชันล่าสุดหรือยัง เพราะทางผู้พัฒนาได้ออกอัปเดตเพื่อปิดช่องโหว่นี้แล้ว ถ้าไม่อัปเดตก็เหมือนเปิดประตูให้แฮกเกอร์เข้าโจมตีได้ง่าย ทั้งนี้ ต้องรักษาความปลอดภัยเสริมด้วยการตั้งค่า WordPress Salts ใหม่ เพราะจะช่วยรีเซ็ต session ต่าง ๆ ให้ออกจากระบบอัตโนมัติในกรณีที่มีผู้ไม่หวังดีล็อกอินเข้ามา และแนะนำให้ตรวจสอบสิทธิ์การเข้าถึงเว็บไซต์โดยละเอียด เช่น ลองสแกนหาไฟล์หรือรหัสที่แปลกปลอม รวมถึงตรวจสอบบัญชีผู้ดูแลระบบว่าไม่มีรายชื่อแปลกปลอมหรือบัญชีที่ไม่ได้ตั้งใจสร้างขึ้น อีกทั้งควรตั้งค่าพารามิเตอร์ Origin และ Type ในคำขอ API อย่างระมัดระวัง เพื่อป้องกันการเจาะระบบผ่านกลไกการกำหนดเส้นทางที่ถูกเจาะช่องโหว่ "Direct Request" ที่ทำให้แฮกเกอร์สามารถผ่านการยืนยันตัวตนได้ง่าย ๆ สุดท้าย ผมแนะนำให้ผู้ดูแลเว็บไซต์ติดตามข่าวสารด้านความปลอดภัยของ Wordpress และปลั๊กอินอย่างต่อเนื่อง รวมถึงมีแผนสำรองข้อมูล (Backup) ที่พร้อมใช้งาน เพื่อให้พร้อมกู้คืนเว็บไซต์ได้อย่างรวดเร็วเมื่อเกิดเหตุการณ์ฉุกเฉิน จากนี้ การดูแลเว็บไซต์ Wordpress จำเป็นต้องระมัดระวังมากขึ้น โดยเฉพาะกับปลั๊กอินที่ใช้งานซึ่งเป็นจุดอ่อนเสมอ ขอให้ทุกคนที่ใช้ Modular DS หรือปลั๊กอินอื่น ๆ รู้จักตรวจสอบและอัปเดตอย่างสม่ำเสมอนะครับ เพื่อปกป้องเว็บไซต์จากภัยคุกคามทางไซเบอร์ที่เพิ่มขึ้นอย่างต่อเนื่อง

Related posts

Wordfence Intelligence Weekly
Last week, there were 54 vulnerabilities disclosed in 49 WordPress Plugins and 0 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 36 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilities in
Wordfence

Wordfence

0 likes

Seafood boil King Crab Legs Mukbang 🦐🦀🦞
@Lemon8 Food #lemon8food #seafoodboil #crab boil #kingcrablegs #Lemon8Diary #cornandpotatos #unfiltered #embracevulnerability
A S H L E Y 💕

A S H L E Y 💕

1461 likes

𝐂𝐥𝐚𝐲 𝐛𝐞𝐚𝐝 𝐛𝐫𝐚𝐜𝐞𝐥𝐞𝐭𝐬
#clay beads #summerbod #embracevulnerability #fyp #claybeadbracelet #grwm
Ella

Ella

598 likes

Kali Forms Exploitation Surges | Wordfence Securit
A critical RCE in the Kali Forms plugin went from 400 exploitation attempts to over 10,600 in one week. Activity after March 25th was roughly 64 times higher than the prior week. Most of the new traffic is reconnaissance - attackers probing sites to confirm vulnerability before deploying admin t
Wordfence

Wordfence

1 like

✨Gym Tip✨
- BAND ASSISTED PUSH UPS— I was doing a circuit 15 kettlebell swings to 10 pushups then repeat reducing reps until I was down to 5 pushups or AMRAP. I used a medium resistance band to assist with my pushups as such ^^ - Using a resistance band for push-ups provides support and helps main
SovereignSelf

SovereignSelf

9 likes

Vulnerability
I am not perfect but this shows how much I appreciate the little things in my life. By this time today I was fighting for my life. As much as I want to say is by God’s grace and my will power it was also the help of my family. Although having a strong heart and mental health was what I think helpe
Xoellah

Xoellah

747 likes

3 ACTUAL SIDE HUSTLES
( LIKE AN SAVE FOR LATER 😮‍💨⤵️ ) Here’s 3 ACTUAL side hustles that I use to make EXTRA income 🙂‍↕️⤵️ Here are three online side hustles that you can start for free: 1. **Blogging:** Start a blog on a topic you're passionate about. You can create content, share your expertise, and mone
Yanaveu Marketing CEO

Yanaveu Marketing CEO

5153 likes

poses for midsize/ plussized ladies
#plussizeposing #plussizeideas #embracevulnerability #Lemon8Diary
zozo!!

zozo!!

1323 likes

Try This For Just 3 Minutes.
Click on the link in my bio for more mommy tummy exercises. #embracevulnerability
MommyMango

MommyMango

26 likes

We love a good glute workout 🥰
I’m always being asked about my glutes routine lol so here it is! Sumo squats - 3 x 10-12 Hip thrust - 3 x 10-12 Rdls - 3 x 10-12 Lunge pulses - 3 x 10-12 each leg Bulgarian split squats - 3 x 10-12 each leg Step-ups - 3 x 10-12 each leg Hamstring curls - 4 x 12 Follow me on TikTok
Dinah O.

Dinah O.

16 likes

glamour altar / witchcraft altar
any witches on here want to be mutuals?? 🥰 i am a practicing green witch myself. #spirituality #spiritual #altar #altardecor #witch #witchcraft #greenwitch #Lemon8Diary #glamourmagic #embracevulnerability
sage moss🧸

sage moss🧸

381 likes

Advice That Healed Me Pt3.
Hello #GloUppers I absolutely loveee sharing these posts! It makes my entire day when members of the community comment that the advice I’ve passed along speaks to them or has come at a really good time. This is exactly why I do what I do. Why would I gatekeep the amazing and helpful bits
Darrel Kennedy

Darrel Kennedy

51 likes

A woman in a white sports bra and shorts takes a selfie in a gym with treadmills, introducing a "28 day fitness challenge: workout #1 (glutes & hams)". A "SWIPE" arrow indicates more content.
A woman in a gym performs dumbbell Romanian deadlifts (DB RDLs), bending forward with dumbbells in hand, focusing on glutes and hamstrings. Dumbbells are visible on the floor.
A woman performs leg presses on a Technogym machine, with a high and narrow foot placement, indicating a focus on glutes and hamstrings. She appears to be exerting effort.
28 day challenge: workout #1
LETS GET STARTED!!! workout focus: glutes and hamstrings 🍑👇🏻 ❓if you’re working out for general/ intro fitness: (good time to add in stabilization movements in!) -use a 4/2/1 tempo -1-3 sets X 12-20 reps -50-60% of your 1 rep max -0-90 sec rest between sets ❓if you’re working out for e
haleigh :)

haleigh :)

26 likes

The Ultimate Mommy Routine: Butts and Guts
This is my favorite targeted routine for toning and strengthening the core, glutes, and legs after a baby. It’s intense, but the results are worth it. 4 x 25 of Each Leg Raises Donkey kickbacks Mountain Climbers Gorilla Squats Embrace the challenge and reclaim your strength, mama! Ev
P2 & You Children’s Skincare

P2 & You Children’s Skincare

522 likes

Things I stopped eating to lose weight
What I eat in a day: Home Edition🥘 - i eat whatever i want simply because i only have a 5/4 eating window and i workout every week day so i don’t have to worry about me gaining any weight #moderation #moderationiskey #weightlosstransformation #gainingweightjourney #tryingtolosewe
khenny

khenny

35 likes

10 pick-me-up songs! 🎧
Aloha sweet pulchritudinous soul! Here are 10 of just some of my all time favorite songs. I specifically chose these songs as a list of (pick-me-up) style songs. ✨ If you’re going through any sort of hard times right now in your life, please take it easy on yourself. Please know that I love you
Jalissa 🎀🌺✨

Jalissa 🎀🌺✨

5 likes

[ Begin dog training ]
How to begin dog training! #dogtraining #dogeducation #dogcratetraining #embracevulnerability #healthylifestyle2024 #dog #dogcommunity #shareyourthoughts
Emma 🩺🐾

Emma 🩺🐾

44 likes

A cardboard box for a light blue modular play couch is displayed in a store aisle, labeled 'AT HOBBY LOBBY'. The box shows a child on the couch and lists a price of $239.99, discounted to $167.99. Text overlays question if it's a 'KNOCK-OFF NUGGET COUCH?'.
Knock-of Nugget Couch?
How do we feel about this knock off nugget couch at Hobby lobby? Does anyone have it? Is there anything like the namebrand one? I saw this and I was going to get it but I wanted your guys feedback first, if it’s great I’m gonna run back there or grab it! Let me know mamas💗 #hobbylob
Saige | Toddler mom✨🪴❤️

Saige | Toddler mom✨🪴❤️

509 likes

Manifest Your Dreams!
Manifestation has now became a Huge part of my life! it's in all of our lives whether we are consciously aware to it or not! Every choice has a reaction in your life and shapes your outcome! In order to change your world without you must change your world within (your mind) as it is a resul
Haven Visuals

Haven Visuals

8 likes

75 HARD CHALLENGE 💪🏽
I’ve never been consistent. But I’ve seen this challenge floating around and it seems to have helped a lot of people be consistent so I’ll see if it can do the same and help me to be consistent. #75hard #embracevulnerability #Fitness #fitnessmotivation #Lemon8 #contentcreator #Lemo
Adriana Janelle

Adriana Janelle

20 likes

THiS GIRL CAN💅🏼
YOU are the creator of your life and walk as your higher self through building solid habits that will elevate your life. Remember that your personality defines your personal reality because your inner world will directly reflect outer world. Being a nail technician means more than just doing nails
Kaylee Sotelo

Kaylee Sotelo

41 likes

El diario de Esmeralda.
Desde lo profundo , me vuelo arte. Un nuevo susurro de alma ha side revelado. A new whisper of the soul has been revealed..🍷💋 blog: https://eldiariodeesmeralda.wordpress.com/ #lemon8dairy #blogging #literatura #embracevulnerability #blog
☆E.V.E☆

☆E.V.E☆

12 likes

My Depression Room Before Cleaning✨
I’ve been going through things recently, and my room went with me😅 Things I’ve learned from my counselor always play in my head though! 1. It’s okay to be in this state, and recharge. It’s okay if your room gets messy. 2. Your room is a visual representation of your mental state. &
Abi Clifford

Abi Clifford

23 likes

El diario de Esmeralda.
Missed me? 🌹✨ The diary opens again… come lose yourself in my magic.😘 ¿Me extrañaron? 🌹✨ El diario se abre otra vez… ven a perderte en mi magia. 😘 link: https://eldiariodeesmeralda.wordpress.com/ #blogger #imbackbabes #embracevulnerability #Lemon8Diary #writer
☆E.V.E☆

☆E.V.E☆

0 likes

Embracing vulnerability as a chronically ill girl
Chronic illness plays a major role in my life. I woke up January 1st, 2023 completely disabled and the journey since then has been extensive, exhausting, and so much more. I share a lot more about my health struggles on my chronic illness instagram @thatchronicallyillchristian so if you’d like
Ashley Hope ✨

Ashley Hope ✨

21 likes

What I ate to go from This to That!
This is a lifestyle, it is importance for me to have fun with my meals especially since I love cooking 💕 #foodtransformation #weightlossfoodideas #embracevulnerability #Lemon8Diary #eatingforweightloss
CHAS | My Digital Dairy

CHAS | My Digital Dairy

1213 likes

🍋what they won't tell you about natural hair
1. transition can be tedious and overwhelming and cause you to quit.😭 2. Sometimes, you won't love your curls at first🫠 3. refraining from heat is the hardest 😪 . comment if you agree👇🏽 . @Lemon8 Beauty @Lemon8 US #l8r2023 #lemon8foryou #Hair #naturalhair #trending #standar
Rani M🦋

Rani M🦋

146 likes

How fitness affects mental health 👀
As someone who fell in love with fitness while I was in a dark place in life, fitness transcends wayyyy beyond just aesthetic purposes. It helps get your mind right! Going to workout is like going to a therapy session 🩶 #embracevulnerability #Lemon8Diary #Fitness #fitmom #momsoflemon8
Bodied by Li

Bodied by Li

61 likes

Godly Quotes that Keeps Me Going 🫶🫶
Are you ready to wait on the LORD for him to answer your Prayers🙏🤲🕊️ #christainlifestyle #christainsoflemon8 #christaingirl #christainmotivation #healing #godquotesandsayings #jesusgirl #embracevulnerability #christaincommuinty #Lemon8Diary
ANNIENETTE🦋✨❤️

ANNIENETTE🦋✨❤️

14 likes

El diario de Esmeralda.
Desde lo profundo , me vuelo arte. Mi Vida es como una rosa, Hermosa, pero con Espinas. Hay cosas que nunca dije. Cosas que dolieron, que me rompieron...pero también me hicieron florecer. En mi nuevo Blog , escribo para sanar , recordar y compartir . Este es "El Diario De Esmeralda."
☆E.V.E☆

☆E.V.E☆

4 likes

From my blog
Journaling on for every day life Don’t forget to leave a like ❤️ if you resonated. Check out my other readings💜🌞 #journaling #tarot #spirituality #embracevulnerability #writing Check out my personal blog @ saiimoonycheers.Wordpress.com or link in bio!!!!💕💕💕💕💕💕💕💕💕💕💕💕💕💕💕💕💕 Etsy sho
Saiimoony tarot

Saiimoony tarot

2 likes

El diario de Esmeralda
Un nuevo susurro de alma ha sido revelado. A new whisper of soul has been revealed link in bio https://eldiariodeesmeralda.wordpress.com/ #blog #blogger #embracevulnerability #Lemon8Diary #español
☆E.V.E☆

☆E.V.E☆

3 likes

A person relaxing on a wooden bench in a scenic mountainous area, illustrating the start of a story about a bipolar disorder diagnosis after a European vacation and recognizing signs of a manic episode.
A person sitting at an outdoor cafe, illustrating early signs of a manic episode during a European trip, including minimal sleep, impulsivity, and grandiose thinking about hiking a dangerous mountain.
A person in a retail store, partially obscured by a hat, representing further signs of a manic episode, such as sudden irritability and excessive, rapid talking, which was uncharacteristic for him.
Signs of bipolar disorder (storytime)
This was a vary scary time, but the bipolar diagnosis made everything much clearer and I wish I knew what these signs were when they were happening. Now obviously hindsight is 20/20 and I recognize now what I didn't see then, but it's important to understand what Bipolar really is. #le
Megan Snyder

Megan Snyder

110 likes

See more