Advisories · Technology
Webpros WP Squared.
Every CVE that names Webpros WP Squared among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.0 CriticalCritical · CVSS 9+
Cross-site scripting in Webpros cPanel and others
- Webpros cPanel
- Webpros WP Squared
- Cross-site scripting (XSS)
- CVSS 9.0 CriticalCritical · CVSS 9+
Cross-site scripting in Webpros cPanel and others
- Webpros cPanel
- Webpros WP Squared
- Cross-site scripting (XSS)
- CVSS 9.9 CriticalCritical · CVSS 9+
OS command injection in Webpros cPanel and others
- Webpros cPanel
- Webpros WP Squared
- Command injection
- CVSS 9.4 CriticalCritical · CVSS 9+
SQL injection in WebPros cPanel and others
- WebPros cPanel
- WebPros WP Squared
- SQL injection
- CVSS 5.6 Medium
HTTP request smuggling in WebPros cPanel and others
- WebPros cPanel
- WebPros WP Squared
- HTTP request smuggling
- CVSS 8.1 High
SQL injection in WebPros cPanel and others
- WebPros cPanel
- WebPros WP Squared
- SQL injection
- CVSS 7.1 High
Incorrect authorization in WebPros cPanel and others
- WebPros cPanel
- WebPros WP Squared
- Broken access control
- CVSS 8.6 High
Execution with unnecessary privileges in WebPros cPanel and others
- WebPros cPanel
- WebPros WP Squared
- Privilege escalation
- CVSS 8.2 High
Improper certificate validation in WebPros cPanel and others
- WebPros cPanel
- WebPros WP Squared
- Weak cryptography or TLS
- CVSS 8.3 High
CRLF injection in WebPros cPanel and others
- WebPros cPanel
- WebPros WP Squared
- Other injection
- CVSS 8.6 High
Path traversal in WebPros cPanel and others
- WebPros cPanel
- WebPros WP Squared
- Path traversal
- CVSS 5.3 Medium
Code injection in WebPros cPanel and others
- WebPros cPanel
- WebPros cPanel (CloudLinux 6, CentOS 6)
- Code injection
- CVSS 5.3 Medium
WebPros cPanel: A chmod call in the cPanel Nova plugin's Cpanel::Nova::Connector follows symlinks…
- WebPros cPanel
- WebPros cPanel (CloudLinux 6, CentOS 6)
- CWE-61
- CVSS 9.3 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV · ransomware
WebPros cPanel and WHM Authentication Bypass via Login Flow
- WebPros cPanel
- WebPros WP Squared
- Authentication bypass