Critical WordPress Modular DS Plugin Flaw Actively Exploited to Gain Admin Access

The Hacker News·Jan 15

This story is reported by The Hacker News. Read what other outlets are saying below, then open the original report for full details.

Full coverage

1

Actively exploited critical flaw in Modular DS WordPress plugin enables admin takeover

Security Affairs·Jan 16

2

40K WordPress Installs at Risk From Modular DS Admin Bypass

eSecurity Planet·Jan 15

3

Hackers exploit Modular DS WordPress plugin flaw for admin access

BleepingComputer·Jan 15

4

January 2026 CVE Landscape: 23 Critical Vulnerabilities Mark 5% Increase, APT28 Exploits Microsoft Office Zero-Day

Recorded Future·Feb 24

5

WordPress membership plugin bug exploited to create admin accounts

BleepingComputer·Mar 5

6

19th January – Threat Intelligence Report

Check Point Research·Jan 19

7

Critical WordPress Plugin Vulnerability Allows Admin Account Takeover

eSecurity Planet·Oct 10