CW
Product
cPanel & WHM and WP2 (WordPress Squared)
by WebPros · last CVE Apr 29, 2026
On CISA KEVExploited in the wildRansomware-linked
1
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 0Medium 0Low 0
Watch

Add cPanel & WHM and WP2 (WordPress Squared) to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-41940
RansomwareIn wildKEV
9.8
99%
Apr 29
WebPros cPanel and WHM Authentication Bypass via Login Flow
Affected: All versions, or not specified
Showing 1