CVE-2026-41940
HIGH CISACVSS Score
N/A
Severity
HIGH
Source
CISA
Published
Apr 30, 2026
Description
WebPros — cPanel & WHM and WP2 (WordPress Squared): WebPros cPanel & WHM (WebHost Manager) and WP2 (WordPress Squared) contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the control panel.