Approved changes feed: RSS · Atom

cpe:2.3:a:webpros:whmcs:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWebpros (3ebf8919-8933-5275-88f3-83c91ccd7db5)
ProductWhmcs (95cabb64-7643-54b5-b14f-d9d5348acab5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-67399 vulnerable 2026-09-16 04:33:05.873381 Details available
Deserialization of untrusted data in WHMCS 9.0.0 before 9.0.8 and 8.0.0 before 8.13.7 allows remote attackers to execute arbitrary code.
Published: 2026-09-14T20:53:05.620Z
Updated: 2026-09-15T13:28:24.720Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-67398 vulnerable 2026-09-16 04:33:05.644355 Details available
Missing authorization vulnerability has been discovered in 2Checkout payment gateway of WHMCS from 8.13.0 before 8.13.7, from 9.0.0 before 9.0.8, all other EOL versions from 4.5.0. The vulnerability allows an unauthenticated user to get WHMCS customer's data via 2Checkout payment gateway's endpoint under specific conditions.
Published: 2026-09-03T23:57:15.810Z
Updated: 2026-09-14T20:53:05.678Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-29204 vulnerable 2026-06-08 07:55:16.229495 Details available
CRITICAL (9.1)
Insufficient ownership check in `clientarea.php` allows an authenticated client area user to submit requests using another user’s `addonId` without any ownership validation leading to unauthorized access to the victim's account.
Published: 2026-05-12T17:46:55.152Z
Updated: 2026-05-12T21:57:08.277Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.