Description
WebPros cPanel & WHM (WebHost Manager) and WP2 (WordPress Squared) contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the control panel.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| cPanel | WebPros / cPanel | >= 11.104.0.0, < 11.110.0.97 | affected |
| cPanel | WebPros / cPanel | >= 11.112.0.0, < 11.118.0.63 | affected |
| cPanel | WebPros / cPanel | >= 11.120.0.0, < 11.124.0.35 | affected |
| cPanel | WebPros / cPanel | >= 11.126.0.0, < 11.126.0.54 | affected |
| cPanel | WebPros / cPanel | >= 11.128.0.0, < 11.130.0.19 | affected |
| cPanel | WebPros / cPanel | >= 11.132.0.0, < 11.132.0.29 | affected |
| cPanel | WebPros / cPanel | >= 11.134.0.0, < 11.134.0.20 | affected |
| cPanel | WebPros / cPanel | >= 11.136.0.0, < 11.136.0.5 | affected |
| cPanel | WebPros / cPanel | >= 11.40.0.0, < 11.86.0.41 | affected |
| cPanel | WebPros / cPanel | >= 11.88.0.0, < 11.94.0.28 | affected |
| cPanel | WebPros / cPanel | >= 11.96.0.0, < 11.102.0.39 | affected |
| WHM | WebPros / WHM | >= 11.104.0.0, < 11.110.0.97 | affected |
| WHM | WebPros / WHM | >= 11.112.0.0, < 11.118.0.63 | affected |
| WHM | WebPros / WHM | >= 11.120.0.0, < 11.124.0.35 | affected |
| WHM | WebPros / WHM | >= 11.126.0.0, < 11.126.0.54 | affected |
| WHM | WebPros / WHM | >= 11.128.0.0, < 11.130.0.19 | affected |
| WHM | WebPros / WHM | >= 11.132.0.0, < 11.132.0.29 | affected |
| WHM | WebPros / WHM | >= 11.134.0.0, < 11.134.0.20 | affected |
| WHM | WebPros / WHM | >= 11.136.0.0, < 11.136.0.5 | affected |
| WHM | WebPros / WHM | >= 11.40.0.0, < 11.86.0.41 | affected |
| WHM | WebPros / WHM | >= 11.88.0.0, < 11.94.0.28 | affected |
| WHM | WebPros / WHM | >= 11.96.0.0, < 11.102.0.39 | affected |
| WP Squared | WebPros / WP Squared | >= 0, < 11.136.1.7 | affected |