Security Risk Category

cPanel & WHM and WP2 (WordPress Squared) Security Risks

Published vulnerability pages connected to cPanel & WHM and WP2 (WordPress Squared). One risk can appear in multiple categories while keeping one canonical page.

cPanel & WHM and WP2 (WordPress Squared) risks

Showing 1 of 1 published risks.

criticalCISA KEVEPSS 0.981

WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability

WebPros cPanel & WHM (WebHost Manager) and WP2 (WordPress Squared) contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the control panel.

CVE-2026-41940wordpresscpanel-and-whm-and-wp2-wordpress-squared

Updated Jul 9, 2026