CVE-2026-47365 — WebPros / WordPress-Toolkit

CVE-2026-47365

WebPros / WordPress-Toolkit PUBLISHED

Description (CNA)

Argument injection vulnerability in WordPress Toolkit before 6.11.0 as used in cPanel & WHM, allows remote authenticated users to bypass cross-tenant authorization and execute arbitrary wp-toolkit CLI commands as another account.

Affected (CNA)

Vendor / product	Versions
WebPros / WordPress-Toolkit	affected 0 before 6.11.0

CWE

CWE-88

References

https://support.cpanel.net/hc/en-us/articles/41004584983703-WP-Toolkit-CVE-2026-47365

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.