en
WHMCS is a web hosting automation and business operations platform from WebPros, provided through WHMCS Ltd. It automates customer signup, recurring billing, invoicing, payment collection, domain and hosting provisioning, renewals, and support. The product is available as self-hosted software and as a WebPros-managed cloud service for hosting providers and other digital service businesses.
As of 10/06/2026, within CyStack's analyzed data, WHMCS has 2 security vulnerabilities published in the last 90 days. Of these, 2 are rated High or Critical. None of these vulnerabilities is listed in the CISA KEV catalog. CyStack recommends that organizations and individual users remediate applicable vulnerabilities as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of WHMCS and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScanSeverity across 3 analyzed records
| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-67399 | Exploitation statusNot known exploited | FixYes | Published09/14/2026 | SeverityCritical |
CVE-2026-67398 | Exploitation statusNot known exploited | FixYes | Published09/03/2026 | SeverityHigh |
CVE-2026-29204 | Exploitation statusNot known exploited | FixYes | Published05/12/2026 | SeverityCritical |
