Webpros Wp Squared vulnerabilities

• webpros cpanel, wp squared +1 more There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Manage SSL Hosts... CVE-2026-93029 9.0 CriticalOctober 2, 2026
• webpros cpanel, wp squared +1 more There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Mass Modify... CVE-2026-93697 9.0 CriticalOctober 2, 2026
• webpros cpanel, wp squared +1 more Insufficient validation allows arbitrary commands to be executed via the Multilang adminbin. CVE-2026-93698 9.9 CriticalOctober 2, 2026
• webpros cpanel, wp squared +1 more Improper preservation of SQL mode when renaming databases in cPanel allows execution of SQL in... CVE-2026-58048 Public exploit 9.4 CriticalJuly 31, 2026
• webpros cpanel, wp squared +1 more HTTP Smuggling in cPanel allows potential leak of credentials. CVE-2026-58047 5.6 MediumJuly 31, 2026
• webpros cpanel, cpanel (cloudlinux 6, centos 6), wp squared +2 more Improper authorization checks of team members privileges allow a team member to escalate... CVE-2026-32991 7.1 HighMay 13, 2026
• webpros cpanel, cpanel (cloudlinux 6, centos 6), wp squared +2 more Insufficient sanitization of SQL queries in the `sqloptimizer` utility script allows SQL... CVE-2026-29206 8.1 HighMay 13, 2026
• webpros cpanel, wp squared +1 more Improper sanitization of the `status` query parameter of the `/unprotected/nova_error` endpoint... CVE-2026-32993 8.3 HighMay 13, 2026
• cpanel, cpanel whm, wp squared +2 more SSL verification is disabled in the DNS Cluster system. This could allow for a malicious server... CVE-2026-32992 8.2 HighMay 13, 2026
• cpanel, cpanel whm, wp squared +2 more Incorrect privileges management and insufficient path filtering allow to read arbitrary file on... CVE-2026-29205 8.6 HighMay 13, 2026
• webpros cpanel, cpanel (cloudlinux 6, centos 6), wp squared +2 more A chmod call in the cPanel Nova plugin's Cpanel::Nova::Connector follows symlinks, allowing... CVE-2026-29203 5.3 MediumMay 8, 2026
• webpros cpanel, cpanel (cloudlinux 6, centos 6), wp squared +2 more Insufficient input validation of the `plugin` parameter of the `create_user` plugin allows... CVE-2026-29202 5.3 MediumMay 8, 2026
• webpros cpanel, cpanel (cloudlinux 6, centos 6), wp squared +2 more Insufficient input validation of the feature file name in `feature::LOADFEATUREFILE` adminbin... CVE-2026-29201 8.6 HighMay 8, 2026
• cpanel, cpanel whm, wp squared +1 more +3 more WebPros cPanel and WHM Authentication Bypass via Login Flow CVE-2026-41940 In KEVPublic exploit EPSS 98.5% 9.3 CriticalApril 29, 2026