Vendor
Softaculous
52 known vulnerabilities in products by Softaculous, 0 of them actively exploited (CISA KEV).
Key figures
52
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
5
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-43641 | Softaculous Virtualizor OS Command Injection via Billing Module Handler | 9.8 | |
| Critical | CVE-2024-8669 | Backuply – Backup, Restore, Migrate and Clone <= 1.3.4 - Authenticated (Admin+) SQL Injection | 9.1 | |
| Critical | CVE-2026-43642 | Softaculous Virtualizor PHP Object Injection via Billing Module Handler | 8.1 | |
| High | CVE-2024-24622 | Softaculous Webuzo Password Reset Command Injection | 8.8 | |
| High | CVE-2024-24623 | Softaculous Webuzo FTP Management Command Injection | 8.8 | |
| High | CVE-2024-7985 | FileOrganizer <= 1.0.9 - Authenticated (Subscriber+) Arbitrary File Upload | 7.5 | |
| High | CVE-2026-43643 | Softaculous Virtualizor Authorization Bypass via Billing Module Handler | 7.5 | |
| Critical | CVE-2024-24621 | Softaculous Webuzo Authentication Bypass | 9.8 | |
| Critical | CVE-2017-6513 | Softaculous WHCMS Reseller Module: security vulnerability | 9.9 | |
| High | CVE-2026-93953 | SQL Injection (CVE-2026-93953) | 8.0 | |
| High | CVE-2024-0842 | Backuply - Backup, Restore, Migrate and Clone <= 1.2.6 - Denial of Service | 7.5 | |
| High | CVE-2024-11010 | FileOrganizer <= 1.1.4 - Authenticated (Administrator+) Local JavaScript File Inclusion | 7.2 | |
| High | CVE-2024-10097 | Loginizer Security and Loginizer <= 1.9.2 - Authentication Bypass via WordPress.com OAuth provider | 8.1 | |
| High | CVE-2026-96768 | Softaculous GoSMTP Pro: Cross-site Scripting | 7.2 | |
| Medium | CVE-2025-10307 | Path Traversal (CVE-2025-10307) | 6.5 | |
| Not rated | CVE-2013-6041 | Softaculous Webuzo: security vulnerability | — | |
| Medium | CVE-2024-0697 | Softaculous Backuply: Path Traversal | 6.5 | |
| Medium | CVE-2026-5114 | SpeedyCache <= 1.3.8 - Authenticated (Administrator+) Arbitrary File Read | 4.9 | |
| Not rated | CVE-2013-6043 | Softaculous Webuzo: security vulnerability | — | |
| High | CVE-2020-26886 | Softaculous: Privilege Escalation | 7.8 | |
| High | CVE-2024-5599 | FileOrganizer <= 1.0.7 - Sensitive Information Exposure via Directory Listing | 7.5 | |
| Medium | CVE-2024-2294 | Backuply – Backup, Restore, Migrate and Clone <= 1.2.7 - Authenticated (Admin+) Directory Traversal | 4.9 | |
| Medium | CVE-2026-2509 | Softaculous Page Builder: Cross-site Scripting | 6.4 | |
| High | CVE-2024-1189 | AMPPS Encryption Passphrase denial of service | 5.3 | |
| Medium | CVE-2026-3297 | Softaculous Page Builder: Cross-site Scripting | 6.4 |