critical · tech · Disclosed Apr 30, 2026

WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical

WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability — WebPros cPanel & WHM (WebHost Manager) and WP2 (WordPress Squared) contain an authentication bypass vulnerabil

Original Disclosure

https://nvd.nist.gov/vuln/detail/CVE-2026-41940

Read original

Severity

critical

Sector

tech

Disclosure date

April 30, 2026

Indexed

2 months, 1 week ago

Assess Exposure → Browse All Breaches View Live Map