CVE-2026-2631
CRITICALDatalogics Ecommerce Delivery <2.6.60 - Privilege Escalation
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2026-2631. PoCs published by AnggaTechI, Nxploited.
AI-analyzed exploit summary This repository contains an asynchronous scanner for CVE-2026-2631, targeting WordPress sites by sending POST requests to `/wp-json/gsf/v1/update-options` to check for vulnerability. It validates targets by checking for a specific success pattern in the response and logs vulnerable sites.
Description
The Datalogics Ecommerce Delivery WordPress plugin before 2.6.60 exposes an unauthenticated REST endpoint that allows any remote user to modify the option `datalogics_token` without verification. This token is subsequently used for authentication in a protected endpoint that allows users to perform arbitrary WordPress `update_option()` operations. Attackers can use this to enable registartion and to set the default role as Administrator.
Exploits (2)
This repository contains an asynchronous scanner for CVE-2026-2631, targeting WordPress sites by sending POST requests to `/wp-json/gsf/v1/update-options` to check for vulnerability. It validates targets by checking for a specific success pattern in the response and logs vulnerable sites.
This repository contains a functional exploit PoC for CVE-2026-2631, targeting a WordPress vulnerability. The exploit automates the process of resetting store configurations, enabling user registration, setting default roles to administrator, and registering a new admin user.
References (1)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H