Security Digest

WebPros: known exploited vulnerabilities

1 WebPros CVE CISA has confirmed as exploited in the wild since October 2023. If you run these products, check each one.

AddedCVEProduct and flawCISA due
2026-04-30CVE-2026-41940WebPros cPanel & WHM and WP2 (WordPress Squared)
WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability Ransomware
2026-05-03