Skip to content
pwned.coffee
Updated 6 min ago
Today's specials
Specials
13
Past orders
Past
The menu
Menu
Your usual
Usual
Delivery
Delivery
History
30 Apr 2026
1 new, 0 updated.
New that day
critical
patched
exploited
30 Apr 2026
WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability
WebPros cPanel & WHM (WebHost Manager) and WP2 (WordPress Squared) contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the control panel. Added to CISA KEV on 2026-04-30 (federal deadline 2026-05-03).
CVE-2026-41940
4 sources