Veille CVE

Recherche « Webpros cPanel »

13 CVE

Critique 9 Élevée 3 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Webpros cPanel » ✕
  1. CVE-2026-93699 8.5 Élevée

    WebPros WP Toolkit

    Argument injection in WP Toolkit for cPanel allows local users to execute arbitrary code as other accounts on the same server.

  2. CVE-2026-93698 9.9 Critique

    Webpros cPanel · Webpros WP Squared

    Insufficient validation allows arbitrary commands to be executed via the Multilang adminbin.

  3. CVE-2026-93697 9.0 Critique

    Webpros cPanel · Webpros WP Squared

    There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Mass Modify Accounts interface.

  4. CVE-2026-93029 9.0 Critique

    Webpros cPanel · Webpros WP Squared

    There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Manage SSL Hosts interface.

  5. CVE-2026-87900 9.4 Critique

    WebPros WP Toolkit for cPanel

    Argument injection in WP Toolkit for cPanel 6.11.2-10794 and earlier allows remote authenticated users to read arbitrary files and execute arbitrary code across customer accounts.

  6. CVE-2026-87899 9.4 Critique

    WebPros cPanel

    Execution with unnecessary privileges in cPanel allows remote authenticated users to execute arbitrary code with root privileges.

  7. CVE-2026-68490 8.2 Élevée

    WebPros cPanel

    Incorrect permission assignment allows local users to obtain sensitive CalDAV/CardDAV information belonging to other accounts.

  8. CVE-2026-67401 9.9 Critique

    WebPros cPanel

    A vulnerability in cPanel allows a mail-enabled account to achieve remote code execution as root through SQLi in EmailTrack component

  9. CVE-2026-65643 8.8 Élevée

    WebPros cPanel · Cpanel cpanel

    Eval injection in cPanel 11.138.0.0 and earlier allows remote authenticated users to execute arbitrary code as root.

  10. CVE-2026-58048 9.4 Critique

    WebPros cPanel · WebPros WP Squared

    Improper preservation of SQL mode when renaming databases in cPanel allows execution of SQL in root context.

  11. CVE-2026-58047 5.6 Moyenne

    WebPros cPanel · WebPros WP Squared

    HTTP Smuggling in cPanel allows potential leak of credentials.

  12. CVE-2026-47365 9.9 Critique

    WebPros WordPress-Toolkit

    Argument injection vulnerability in WordPress Toolkit before 6.11.0 as used in cPanel & WHM, allows remote authenticated users to bypass cross-tenant authorization and execute arbitrary wp-toolkit CLI commands as another account.

  13. CVE-2026-41940 9.8 Critique Exploitée Rançongiciel

    WebPros cPanel · WebPros WP Squared · WebPros WHM · Cpanel cpanel

    cPanel and WHM versions after 11.40 contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the control panel.