WebPros vulnerabilities
50 published CVEs name WebPros among the affected products; CISA lists 1 of them as exploited in the wild.
- Published CVEs
- 50
- Last 12 months
- 50
- Critical
- 29
- Known exploited
- 1
Critical 29High 18Medium 3Low 0Not scored 0
Known exploitedNewest addition to KEV first
- CVE-2026-41940
WebPros cPanel and WHM Authentication Bypass via Login Flow
WebPros · cPanel
ExploitedCritical9.3
Newest CVEs
- CVE-2026-105476
Improper link resolution before file access in cPanel allows remote authenticated users to write arbitrary root-owned files and escalate privileges.
WebPros · cPanel
High8.8 - CVE-2026-105475
Improper neutralization of a NUL byte in cPanel allows remote attackers to read any mail account's calendar and contact data.
WebPros · cPanel
High8.7 - CVE-2026-105474
A server-side template injection exists in SolusVM 2 up to version 2.0.0-44576 that allows remote authenticated users to execute arbitrary code as root.
WebPros · SolusVM 2
Critical9.4 - CVE-2026-93699
Argument injection in WP Toolkit for cPanel allows local users to execute arbitrary code as other accounts on the same server.
WebPros · WP Toolkit
High8.5 - CVE-2026-93029
There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Manage SSL Hosts interface.
Webpros · cPanel
Critical9.0 - CVE-2026-93697
There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Mass Modify Accounts interface.
Webpros · cPanel
Critical9.0 - CVE-2026-93698
Insufficient validation allows arbitrary commands to be executed via the Multilang adminbin.
Webpros · cPanel
Critical9.9 - CVE-2026-87899
Execution with unnecessary privileges in cPanel allows remote authenticated users to execute arbitrary code with root privileges.
WebPros · cPanel
Critical9.4 - CVE-2026-68492
An untrusted search path vulnerability in Plesk from 18.0.34 before 18.0.80.8 and 18.0.81 before 18.0.81.1 allows remote authenticated users to execute…
WebPros · Plesk
High8.7 - CVE-2026-68490
Incorrect permission assignment allows local users to obtain sensitive CalDAV/CardDAV information belonging to other accounts.
WebPros · cPanel
High8.2