MSRXMSRXSecurity
Vendors / WebPros

WebPros vulnerabilities being exploited

1 WebPros flaw was confirmed exploited in the wild in the past 365 days, 1 used in ransomware, across 1 product: cPanel & WHM and WP2 (WordPress Squared). If you run any of them, patch these first.

AddedExploited vulnerabilityFix by
2026-04-30CVE-2026-41940 cPanel & WHM and WP2 (WordPress Squared)
ransomwareWebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability

WebPros cPanel & WHM (WebHost Manager) and WP2 (WordPress Squared) contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the control panel.

2026-05-03
Watch my WebPros softwareScan a websiteAll vendors

Source: CISA Known Exploited Vulnerabilities catalog 2026.10.30 (live). A listing means some versions are affected: check yours in the advisory. Guidance only.