Login Request a demo
WS
Product
WP Squared
by Cpanel · last CVE May 13, 2026
On CISA KEVExploited in the wildRansomware-linked
3
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities3In the news4Timeline
Severity mix
Critical 1High 2Medium 0Low 0
Severity
All severities3Critical1High2Medium0Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add WP Squared to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-41940
RansomwareIn wildKEV
9.8
99%
Apr 29
WebPros cPanel and WHM Authentication Bypass via Login Flow
Affected: before 136.1.7
CVE-2026-29205
8.6
8%
May 13
Incorrect privileges management and insufficient path filtering allow to read arbitrary file on the server via the cpdavd attachment download endpoints
Affected: 120.1.0 before 136.1.12
CVE-2026-32992
8.2
0%
May 13
SSL verification is disabled in the DNS Cluster system
Affected: 126.1.0 before 136.1.12
Showing 3