
- Patchstack found critical Modular DS flaw (CVE-2026-23550) allowing admin bypass
- Vulnerability scored 10/10 and is already being exploited in the wild
- Vendor released fix in version 2.5.2; users urged to upgrade immediately
If your WordPress website is running the Modular DS plugin, you might want to update to the latest version as soon as possible.