cPanel & WHM and WP2 (WordPress Squared) vulnerabilities
1 published alerts for WebPros cPanel & WHM and WP2 (WordPress Squared).
Actively exploited (KEV)Ransomware
WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability
WebPros cPanel & WHM and WP2 (WordPress Squared) is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2026-41940). WebPros cPanel & WHM (WebHost Manager) and WP2 (WordPress Squared) contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the control panel. CISA remediation due date: 2026-05-03. If you need help checking exposure, call (864) 335-9223.