WordPress Articles

Critical WordPress Plugin Vulnerability Actively Exploited in the Wild

CVE-2026-23550 in Modular DS plugin scores maximum CVSS 10.0, enabling unauthenticated privilege escalation. Attacks began January 13 targeting 40,000+ installations.

January 14, 2026 WordPress vulnerability exploitation