Vendor
Critical Vulnerabilities in Plesk and cPanel/WHM
4 CVEsMultiple vulnerabilities, including arbitrary code execution as root, impact various WebPros products including Plesk extensions and cPanel/WHM components.
Security Advisories for cPanel WHM and ConfigServer Security & Firewall
3 CVEsWebPros has released patches for multiple critical vulnerabilities in cPanel & WebHost Manager and ConfigServer Security & Firewall, including an SQL injection flaw in the EmailTrack component.
Security Vulnerabilities in Plesk Management Interface and Extensions
2 CVEsWebPros has released security updates for Plesk and its Migrator and Site Import extensions to address critical vulnerabilities CVE-2026-65642 and CVE-2026-65647.
Blind SQL Injection Vulnerability in Plesk Obsidian
1 TTP 1 CVEPlesk Obsidian versions prior to 18.0.80.1 and 18.0.79.5 are vulnerable to a blind SQL injection (CVE-2026-64636) which allows unauthenticated or low-privileged attackers to execute unauthorized database queries.
Security Updates for cPanel and WP Squared
2 CVEsWebPros has issued a security advisory addressing HTTP request smuggling and database privilege escalation vulnerabilities in cPanel and WP Squared products.
Blind SQL Injection Vulnerability in Plesk XML-RPC API
1 rule 1 TTP 1 CVEA blind SQL injection vulnerability, tracked as CVE-2026-58046, affects the Plesk XML-RPC API, potentially allowing unauthenticated attackers to execute arbitrary database queries.
WebPros cPanel & WHM and WP2 Authentication Bypass Vulnerability (CVE-2026-41940)
2 rules 1 TTP 1 CVECVE-2026-41940 is an authentication bypass vulnerability in WebPros cPanel & WHM and WP2 (WordPress Squared) that allows unauthenticated remote attackers to gain unauthorized access to the control panel.