Product by WebPros

Wp Squared

14 known vulnerabilities in Wp Squared (WebPros), 1 of them actively exploited (CISA KEV).

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in Wp Squared (WebPros)

Critical	CVE-2026-41940	WebPros cPanel and WHM Authentication Bypass via Login Flow In CISA KEVRansomwarealso in 4 other products	9.8	29.04.2026
High	CVE-2026-29205	WebPros cPanel: Execution with Unnecessary Privileges also in 4 other products	8.6	13.05.2026
High	CVE-2026-29202	WebPros cPanel: Code Injection also in 2 other products	8.8	08.05.2026
Critical	CVE-2026-93698	Webpros cPanel: OS Command Injection also in 3 other products	9.9	02.10.2026
Critical	CVE-2026-93029	Webpros cPanel: Cross-site Scripting also in 3 other products	9.0	02.10.2026
Critical	CVE-2026-93697	Webpros cPanel: Cross-site Scripting also in 3 other products	9.0	02.10.2026
Critical	CVE-2026-58048	WebPros cPanel: SQL Injection also in 2 other products	—	31.07.2026
High	CVE-2026-29203	WebPros cPanel: UNIX Symbolic Link (Symlink) Following also in 2 other products	8.8	08.05.2026
High	CVE-2026-29201	WebPros cPanel: Relative Path Traversal also in 2 other products	8.6	08.05.2026
Medium	CVE-2026-58047	WebPros cPanel: HTTP Request/Response Smuggling also in 2 other products	—	31.07.2026
High	CVE-2026-32993	WebPros cPanel: CRLF Injection also in 1 other product	8.3	13.05.2026
High	CVE-2026-29206	WebPros cPanel: SQL Injection also in 2 other products	8.1	13.05.2026
High	CVE-2026-32992	WebPros cPanel: Improper Certificate Validation also in 4 other products	8.2	13.05.2026
High	CVE-2026-32991	WebPros cPanel: Incorrect Authorization also in 2 other products	7.1	13.05.2026