Advisories · Technology

WebPros WHMCS.

Every CVE that names WebPros WHMCS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-67399 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Deserialization of untrusted data in WebPros WHMCS
- WebPros WHMCS
- Insecure deserialization
Not analysed yet 14 Sept 2026
CVE-2026-67398 CVE record

CVSS 8.2 High

Missing authorization in WebPros WHMCS
- WebPros WHMCS
- Broken access control
Not analysed yet 3 Sept 2026
CVE-2026-29204 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Insecure direct object reference in WebPros WHMCS
- WebPros WHMCS
- Broken access control
Not analysed yet 12 May 2026