wp_toolkit_for_cpanel vulnerabilities

CVEs whose affected-version data names the wp_toolkit_for_cpanel package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-87900Critical· 9.4

Argument injection in WP Toolkit for cPanel 6.11.2-10794 and earlier allows remote authenticated users to read arbitrary files and execute arbitrary code across customer accounts.

Argument injection in WP Toolkit for cPanel 6.11.2-10794 and earlier allows remote authenticated users to read arbitrary files and execute arbitrary code across customer accounts.

▾ MidnightWebPros · WP Toolkit for cPanelvia NVD

wp_toolkit_for_cpanel vulnerabilities (CVEs) · VulnSea