Cpanel: >> Wp Squared >> 136.1.7 Security Vulnerabilities
SSL verification is disabled in the DNS Cluster system. This could allow for a malicious server to man-in-the-middle the request and capture credentials.
CVSS Score
8.2
EPSS Score
0.003
Published
2026-05-13
Incorrect privileges management and insufficient path filtering allow to read arbitrary file on the server via the cpdavd attachment download endpoints.
CVSS Score
8.6
EPSS Score
0.082
Published
2026-05-13