Skip to content
OpenAdvisories

Vendor

leopardhost

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 10.0
    CVE-2025-12539 Public exploit

    TNC Toolbox: Web Performance <= 1.4.2 - Unauthenticated Sensitive Information Exposure to Privilege Escalation/cPanel Account Takeover

    The TNC Toolbox: Web Performance plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.2. This is due to the plugin storing cPanel API credentials (hostname, username, and API key) in files within the w…