WebPros
WebPros provides software for web-hosting infrastructure and operations. In the supplied records, WebPros is associated with cPanel.
- Total products in the ecosystem
- 19
- Total vulnerabilities (90 days)
- 29
en
WebPros provides software for web-hosting infrastructure and operations. In the supplied records, WebPros is associated with cPanel.
As of 11/08/2026, WebPros recorded 29 security vulnerabilities in the last 90 days across 15 products, including 29 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, cPanel had the most security vulnerabilities in the WebPros ecosystem, with 9 vulnerabilities—approximately 31.03% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-105476CVE-2026-105476CVE-2026-105475CVE-2026-105475CVE-2026-105474CVE-2026-105474CVE-2026-93699Argument injection enables cross-account code execution in WebPros WP Toolkit for cPanelCVE-2026-93698CVE-2026-93698| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-105476CVE-2026-105476 | Exploitation statusNot exploited | FixYes | Affected product |
| Published11/02/2026 |
| SeverityHigh |
CVE-2026-105475CVE-2026-105475 | Exploitation statusNot exploited | FixYes | Affected productcPanel | Published11/02/2026 | SeverityHigh |
|---|
CVE-2026-105474CVE-2026-105474 | Exploitation statusNot exploited | FixYes | Affected productSolusVM 2 | Published10/15/2026 | SeverityCritical |
|---|
CVE-2026-93699Argument injection enables cross-account code execution in WebPros WP Toolkit for cPanel | Exploitation statusNot confirmed | FixYes | Affected productWP Toolkit | Published10/08/2026 | SeverityHigh |
|---|
CVE-2026-93698CVE-2026-93698 | Exploitation statusNot exploited | FixYes | Affected productcPanel | Published10/02/2026 | SeverityCritical |
|---|
CVE-2026-93697CVE-2026-93697 | Exploitation statusNot exploited | FixYes | Affected productcPanel | Published10/02/2026 | SeverityCritical |
|---|
CVE-2026-93029CVE-2026-93029 | Exploitation statusNot exploited | FixYes | Affected productcPanel | Published10/02/2026 | SeverityCritical |
|---|
CVE-2026-87900Argument injection in WebPros WP Toolkit for cPanel enables cross-account file access and code execution | Exploitation statusNot exploited | FixNo | Affected productWP Toolkit for cPanel | Published09/23/2026 | SeverityCritical |
|---|
CVE-2026-87899CVE-2026-87899 | Exploitation statusNot exploited | FixYes | Affected productcPanel | Published09/23/2026 | SeverityCritical |
|---|
CVE-2026-87898CVE-2026-87898 | Exploitation statusNot exploited | FixNo | Affected productPlesk extension "Site Import" | Published09/23/2026 | SeverityCritical |
|---|
CVE-2026-68492CVE-2026-68492 | Exploitation statusNot exploited | FixYes | Affected productPlesk | Published09/23/2026 | SeverityHigh |
|---|
CVE-2026-68490CVE-2026-68490 | Exploitation statusNot exploited | FixYes | Affected productcPanel | Published09/23/2026 | SeverityHigh |
|---|
CVE-2026-68491Symlink Following Allows Arbitrary File Overwrite in Webpros SolusVM | Exploitation statusNot exploited | FixYes | Affected productSolusVM | Published09/15/2026 | SeverityCritical |
|---|
CVE-2026-68489CVE-2026-68489 | Exploitation statusNot exploited | FixYes | Affected productPlesk extension "Node.js Toolkit" | Published09/14/2026 | SeverityHigh |
|---|
CVE-2026-67399Unsafe Deserialization Enables Unauthenticated Remote Code Execution in WebPros WHMCS | Exploitation statusNot exploited | FixYes | Affected productWHMCS | Published09/14/2026 | SeverityCritical |
|---|
CVE-2026-68488CVE-2026-68488 | Exploitation statusNot exploited | FixYes | Affected productPlesk | Published09/10/2026 | SeverityCritical |
|---|
CVE-2026-68487CVE-2026-68487 | Exploitation statusNot exploited | FixYes | Affected productPlesk | Published09/10/2026 | SeverityCritical |
|---|
CVE-2026-65639CVE-2026-65639 | Exploitation statusNot exploited | FixYes | Affected productConfigServer Security & Firewall | Published09/10/2026 | SeverityCritical |
|---|
CVE-2026-65638CVE-2026-65638 | Exploitation statusNot exploited | FixYes | Affected productConfigServer Security & Firewall | Published09/10/2026 | SeverityCritical |
|---|
CVE-2026-67401CVE-2026-67401 | Exploitation statusNot exploited | FixYes | Affected productcPanel | Published09/09/2026 | SeverityCritical |
|---|
CVE-2026-67402CVE-2026-67402 | Exploitation statusNot exploited | FixYes | Affected productConfigServer Security & Firewall | Published09/03/2026 | SeverityCritical |
|---|
CVE-2026-67398Missing authorization in the WebPros WHMCS 2Checkout payment gateway exposes customer data | Exploitation statusNot exploited | FixYes | Affected productWHMCS | Published09/03/2026 | SeverityHigh |
|---|
CVE-2026-67397CVE-2026-67397 | Exploitation statusNot exploited | FixYes | Affected productPlesk | Published09/03/2026 | SeverityHigh |
|---|
CVE-2026-67394CVE-2026-67394 | Exploitation statusNot exploited | FixYes | Affected productPlesk | Published09/01/2026 | SeverityCritical |
|---|
CVE-2026-65643CVE-2026-65643 | Exploitation statusActively exploited | FixYes | Affected productcPanel | Published09/01/2026 | SeverityHigh |
|---|
CVE-2026-65647CVE-2026-65647 | Exploitation statusNot exploited | FixYes | Affected productPlesk Migrator | Published08/26/2026 | SeverityHigh |
|---|
CVE-2026-65646CVE-2026-65646 | Exploitation statusNot exploited | FixYes | Affected productPlesk | Published08/26/2026 | SeverityCritical |
|---|
CVE-2026-65642CVE-2026-65642 | Exploitation statusNot exploited | FixYes | Affected productPlesk | Published08/26/2026 | SeverityHigh |
|---|
CVE-2026-64639CVE-2026-64639 | Exploitation statusNot exploited | FixYes | Affected productPlesk | Published08/12/2026 | SeverityCritical |
|---|
CVE-2026-64637CVE-2026-64637 | Exploitation statusNot exploited | FixYes | Affected productPlesk | Published08/07/2026 | SeverityCritical |
|---|
CVE-2026-64636CVE-2026-64636 | Exploitation statusNot exploited | FixYes | Affected productPlesk | Published08/07/2026 | SeverityHigh |
|---|
CVE-2026-58048CVE-2026-58048 | Exploitation statusNot exploited | FixYes | Affected productcPanel | Published07/31/2026 | SeverityCritical |
|---|
CVE-2026-58047CVE-2026-58047 | Exploitation statusNot exploited | FixYes | Affected productcPanel | Published07/31/2026 | SeverityMedium |
|---|
CVE-2026-58046CVE-2026-58046 | Exploitation statusNot exploited | FixYes | Affected productPlesk | Published07/30/2026 | SeverityCritical |
|---|
CVE-2026-56843CVE-2026-56843 | Exploitation statusNot exploited | FixYes | Affected productPlesk | Published07/08/2026 | SeverityCritical |
|---|
CVE-2026-48614CVE-2026-48614 | Exploitation statusNot exploited | FixYes | Affected productPlesk | Published07/06/2026 | SeverityCritical |
|---|
CVE-2026-47365CVE-2026-47365 | Exploitation statusNot exploited | FixYes | Affected productWordPress-Toolkit | Published06/12/2026 | SeverityCritical |
|---|
CVE-2026-44962CVE-2026-44962 | Exploitation statusNot exploited | FixYes | Affected productPlesk | Published05/29/2026 | SeverityCritical |
|---|
CVE-2026-32999CVE-2026-32999 | Exploitation statusNot exploited | FixYes | Affected productComet Backup | Published05/28/2026 | SeverityCritical |
|---|
CVE-2026-32993CVE-2026-32993 | Exploitation statusNot exploited | FixYes | Affected productcPanel | Published05/13/2026 | SeverityHigh |
|---|
CVE-2026-32992CVE-2026-32992 | Exploitation statusNot exploited | FixYes | Affected productcPanel | Published05/13/2026 | SeverityHigh |
|---|
CVE-2026-32991CVE-2026-32991 | Exploitation statusNot exploited | FixYes | Affected productcPanel | Published05/13/2026 | SeverityHigh |
|---|
CVE-2026-29206CVE-2026-29206 | Exploitation statusNot exploited | FixYes | Affected productcPanel | Published05/13/2026 | SeverityHigh |
|---|
CVE-2026-29205CVE-2026-29205 | Exploitation statusNot exploited | FixYes | Affected productcPanel | Published05/13/2026 | SeverityHigh |
|---|
CVE-2026-29204WebPros WHMCS Client Area IDOR enables cross-account access | Exploitation statusNot exploited | FixYes | Affected productWHMCS | Published05/12/2026 | SeverityCritical |
|---|
CVE-2026-29203CVE-2026-29203 | Exploitation statusNot exploited | FixYes | Affected productcPanel | Published05/08/2026 | SeverityMedium |
|---|
CVE-2026-29202CVE-2026-29202 | Exploitation statusNot exploited | FixYes | Affected productcPanel | Published05/08/2026 | SeverityMedium |
|---|
CVE-2026-29201CVE-2026-29201 | Exploitation statusNot exploited | FixYes | Affected productcPanel | Published05/08/2026 | SeverityHigh |
|---|
CVE-2026-29200CVE-2026-29200 | Exploitation statusNot exploited | FixYes | Affected productComet Backup | Published05/04/2026 | SeverityCritical |
|---|
CVE-2026-41940WebPros cPanel and WHM Authentication Bypass via Login Flow | Exploitation statusKEV | FixYes | Affected productcPanel | Published04/29/2026 | SeverityCritical |
|---|
50 Results | Page 1 of 1