Description
Argument injection in WP Toolkit for cPanel allows local users to execute arbitrary code as other accounts on the same server.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| WebPros | WP Toolkit | < 6.11.4 | 6.11.4 |
High · 8.5
CVE-2026-93699
EUVD-2026-94799GHSA-fh55-xx6c-9h8v
Argument injection in WP Toolkit for cPanel allows local users to execute arbitrary code as other accounts on the same server.
Published Oct 8, 2026 · Updated Oct 8, 2026 · Assigned by hackerone