Approved changes feed: RSS · Atom

cpe:2.3:a:webpros:wp_squared:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWebpros (3ebf8919-8933-5275-88f3-83c91ccd7db5)
ProductWp Squared (c6293486-8ff7-5ea6-876e-4ad6211ef2d1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-58048 vulnerable 2026-09-16 04:32:42.769397 Details available
Improper preservation of SQL mode when renaming databases in cPanel allows execution of SQL in root context.
Published: 2026-07-31T16:35:56.665Z
Updated: 2026-08-07T18:00:28.533Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-58047 vulnerable 2026-09-16 04:32:42.392515 Details available
HTTP Smuggling in cPanel allows potential leak of credentials.
Published: 2026-07-31T16:35:56.600Z
Updated: 2026-08-07T18:00:48.776Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-41940 not_vulnerable 2026-06-08 08:03:15.791820 WebPros cPanel and WHM Authentication Bypass via Login Flow
CRITICAL (9.8)
cPanel and WHM versions after 11.40 contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the control panel.
Published: 2026-04-29T15:10:37.899Z
Updated: 2026-09-30T17:20:17.713Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-32993 vulnerable 2026-06-08 07:57:18.429223 Details available
HIGH (8.3)
Improper sanitization of the `status` query parameter of the `/unprotected/nova_error` endpoint allows unauthenticated attacker to inject arbitrary HTTP header to the response.
Published: 2026-05-13T22:06:04.114Z
Updated: 2026-05-14T13:12:33.758Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-32992 vulnerable 2026-06-08 07:57:18.428842 Details available
HIGH (8.2)
SSL verification is disabled in the DNS Cluster system. This could allow for a malicious server to man-in-the-middle the request and capture credentials.
Published: 2026-05-13T22:06:04.157Z
Updated: 2026-05-14T13:13:06.565Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-32991 vulnerable 2026-06-08 07:57:18.427250 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-29206 vulnerable 2026-06-08 07:55:16.230265 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-29205 vulnerable 2026-06-08 07:55:16.229853 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-29203 vulnerable 2026-06-08 07:55:16.227407 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-29202 vulnerable 2026-06-08 07:55:16.226947 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-29201 vulnerable 2026-06-08 07:55:16.225309 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.