Vendor
WebPros
51 known vulnerabilities.
Products
cPanel 20
Plesk 14
WP Squared 14
cPanel (CloudLinux 6, CentOS 6) 5
WHMCS 3
ConfigServer Security & Firewall 3
Plesk extension "Site Import" 2
Comet Backup 2
Plesk extension "Plesk RESTful API" 1
SolusVM 1
WP Toolkit 1
WordPress-Toolkit 1
SolusVM 2 1
WP Toolkit for cPanel 1
WHM 1
Plesk Migrator 1
Plesk Site Import 1
Plesk extension "Ruby" 1
Plesk extension "Node.js Toolkit" 1
51 results · Feed
-
High 7.1
Improper authorization checks of team members privileges allow a team member to escalate privileges to the team owner a…
-
High 8.1
Insufficient sanitization of SQL queries in the `sqloptimizer` utility script allows SQL Injections on behalf of the ro…
-
High 8.3
Improper sanitization of the `status` query parameter of the `/unprotected/nova_error` endpoint allows unauthenticated …
-
High 8.2
SSL verification is disabled in the DNS Cluster system. This could allow for a malicious server to man-in-the-middle th…
-
High 8.6
Incorrect privileges management and insufficient path filtering allow to read arbitrary file on the server via the cpda…
-
Critical 9.1CVE-2026-29204 Public exploit
Insufficient ownership check in `clientarea.php` allows an authenticated client area user to submit requests using anot…
-
Medium 5.3
Insufficient input validation of the `plugin` parameter of the `create_user` plugin allows arbitrary Perl code executio…
-
Medium 5.3
A chmod call in the cPanel Nova plugin's Cpanel::Nova::Connector follows symlinks, allowing setting root permissions on…
-
High 8.6
Insufficient input validation of the feature file name in `feature::LOADFEATUREFILE` adminbin call can cause arbitrary …
-
Critical 9.9
A critical IDOR vulnerability has been discovered in Comet Backup affecting all versions from 20.11.0 to 26.1.1 and 26.…
-
Critical 9.8
WebPros cPanel and WHM Authentication Bypass via Login Flow
cPanel and WHM versions after 11.40 contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the control panel.
KEV Apr 30, 2026