cPanel / WP Squared

3 CVEs

CVE ID	Description	Severity	CVSS	Published
CVE-2026-29205	Incorrect privileges management and insufficient path filtering allow to read arbitrary file on the server via the cpdavd attachment download endpoints.	HIGH	8.6	May 13, 2026
CVE-2026-32992	SSL verification is disabled in the DNS Cluster system. This could allow for a malicious server to man-in-the-middle the request and capture credentials.	HIGH	8.2	May 13, 2026
CVE-2026-41940 KEV	WebPros cPanel and WHM Authentication Bypass via Login Flow	CRITICAL	9.3	Apr 29, 2026

Rows per page

Showing 1 to 3 of 3 CVEs