CVE-2026-87900 — WebPros / WP Toolkit for cPanel

CVE-2026-87900

WebPros / WP Toolkit for cPanel PUBLISHED

Description (CNA)

Argument injection in WP Toolkit for cPanel 6.11.2-10794 and earlier allows remote authenticated users to read arbitrary files and execute arbitrary code across customer accounts.

Affected (CNA)

Vendor / product	Versions
WebPros / WP Toolkit for cPanel	affected 0 through 6.11.2-10794; unaffected 6.11.3-10850 before 6.11.3-10850

CWE

CWE-88

References

https://support.cpanel.net/hc/en-us/articles/43597969409943

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.