Vendor
WebPros
51 known vulnerabilities.
Products
cPanel 20
Plesk 14
WP Squared 14
cPanel (CloudLinux 6, CentOS 6) 5
WHMCS 3
ConfigServer Security & Firewall 3
Plesk extension "Site Import" 2
Comet Backup 2
Plesk extension "Plesk RESTful API" 1
SolusVM 1
WP Toolkit 1
WordPress-Toolkit 1
SolusVM 2 1
WP Toolkit for cPanel 1
WHM 1
Plesk Migrator 1
Plesk Site Import 1
Plesk extension "Ruby" 1
Plesk extension "Node.js Toolkit" 1
18 results · Clear filters · Feed
-
High 8.7
Improper neutralization of a NUL byte in cPanel allows remote attackers to read any mail account's calendar and contact…
-
High 8.8
Improper link resolution before file access in cPanel allows remote authenticated users to write arbitrary root-owned f…
-
High 8.5
Argument injection in WP Toolkit for cPanel allows local users to execute arbitrary code as other accounts on the same …
-
High 8.2
Incorrect permission assignment allows local users to obtain sensitive CalDAV/CardDAV information belonging to other ac…
-
High 8.7
An untrusted search path vulnerability in Plesk from 18.0.34 before 18.0.80.8 and 18.0.81 before 18.0.81.1 allows remot…
-
High 8.7
Static Code Injection in Plesk extensions "Ruby" before 1.6.6 and "Node.js Toolkit" before 2.5.0 allows remote authenti…
-
High 8.5
Path traversal in Plesk 18.0.79.9 and earlier and 18.0.80 through 18.0.80.5 allows local users to execute arbitrary cod…
-
High 8.2
Missing authorization vulnerability has been discovered in 2Checkout payment gateway of WHMCS from 8.13.0 before 8.13.7…
-
High 8.7CVE-2026-65643 Public exploit
Eval injection in cPanel 11.138.0.0 and earlier allows remote authenticated users to execute arbitrary code as root.
-
High 8.7CVE-2026-65647 Public exploit
Improper symlink resolution before file access in Plesk allows remote authenticated users to execute arbitrary code as …
-
High 8.6
Insecure direct object reference in Plesk 18.0.79.7 and earlier or 18.0.80 through 18.0.80.3, allows remote authenticat…
-
High 7.7
An SQL injection vulnerability in Plesk Obsidian up to 18.0.80 for Linux and Windows allows an authenticated user to re…
-
High 7.1
Improper authorization checks of team members privileges allow a team member to escalate privileges to the team owner a…
-
High 8.1
Insufficient sanitization of SQL queries in the `sqloptimizer` utility script allows SQL Injections on behalf of the ro…
-
High 8.3
Improper sanitization of the `status` query parameter of the `/unprotected/nova_error` endpoint allows unauthenticated …
-
High 8.2
SSL verification is disabled in the DNS Cluster system. This could allow for a malicious server to man-in-the-middle th…
-
High 8.6
Incorrect privileges management and insufficient path filtering allow to read arbitrary file on the server via the cpda…
-
High 8.6
Insufficient input validation of the feature file name in `feature::LOADFEATUREFILE` adminbin call can cause arbitrary …