Updated 27 min ago

Vulnerability database

Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.

1,764exploited flaws on CISA’s list

36added in the last 30 days

479new WordPress flaws this week

390,525entries in the database

133 results · page 2 of 3

Oct 9, 2019cPanel before 82.0.15 allows self stored XSS in the WHM SSL Storage Manager interface (SEC-527).CVE-2019-17379 · Websites & servers · Cpanel · reported by MITREMedium 6.1
cPanel before 82.0.15 allows self stored XSS in the WHM SSL Storage Manager interface (SEC-527).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 6, 2019cPanel before 58.0.4 allows WHM "Purchase and Install an SSL Certificate" page visitors to list all server domains (SEC-133).CVE-2016-10797 · Websites & servers · Cpanel · reported by MITREMedium 4.3
cPanel before 58.0.4 allows WHM "Purchase and Install an SSL Certificate" page visitors to list all server domains (SEC-133).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 6, 2019cPanel before 59.9999.145 allows stored XSS in the WHM tail_upcp2.cgi interface (SEC-156).CVE-2016-10795 · Websites & servers · Cpanel · reported by MITREMedium 6.1
cPanel before 59.9999.145 allows stored XSS in the WHM tail_upcp2.cgi interface (SEC-156).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 6, 2019cPanel before 60.0.25 allows self XSS in WHM Tweak Settings for autodiscover_host (SEC-177).CVE-2016-10777 · Websites & servers · Cpanel · reported by MITREMedium 5.4
cPanel before 60.0.25 allows self XSS in WHM Tweak Settings for autodiscover_host (SEC-177).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 6, 2019cPanel before 60.0.25 allows stored XSS during the homedir removal phase of WHM Account termination (SEC-174).CVE-2016-10776 · Websites & servers · Cpanel · reported by MITREMedium 5.4
cPanel before 60.0.25 allows stored XSS during the homedir removal phase of WHM Account termination (SEC-174).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 5, 2019cPanel before 62.0.4 allows resellers to use the WHM enqueue_transfer_item API for queueing non-rearrange modules (SEC-213).CVE-2017-18482 · Websites & servers · Cpanel · reported by MITREMedium 6.5
cPanel before 62.0.4 allows resellers to use the WHM enqueue_transfer_item API for queueing non-rearrange modules (SEC-213).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 5, 2019cPanel before 62.0.4 allows stored XSS in the WHM Account Suspension List interface (SEC-211).CVE-2017-18481 · Websites & servers · Cpanel · reported by MITREMedium 5.4
cPanel before 62.0.4 allows stored XSS in the WHM Account Suspension List interface (SEC-211).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net news.cpanel.com
Aug 5, 2019cPanel before 62.0.4 does not enforce account ownership for has_mycnf_for_cpuser WHM API calls (SEC-210).CVE-2017-18480 · Websites & servers · Cpanel · reported by MITREMedium 6.5
cPanel before 62.0.4 does not enforce account ownership for has_mycnf_for_cpuser WHM API calls (SEC-210).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 5, 2019In cPanel before 62.0.4, WHM SSL certificate generation uses an unreserved e-mail address (SEC-209).CVE-2017-18479 · Websites & servers · Cpanel · reported by MITREMedium 6.5
In cPanel before 62.0.4, WHM SSL certificate generation uses an unreserved e-mail address (SEC-209).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 5, 2019cPanel before 60.0.25 allows stored XSS in the WHM Repair Mailbox Permissions interface (SEC-159).CVE-2016-10767 · Websites & servers · Cpanel · reported by MITREMedium 5.4
cPanel before 60.0.25 allows stored XSS in the WHM Repair Mailbox Permissions interface (SEC-159).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net news.cpanel.com
Aug 5, 2019cPanel before 62.0.17 allows arbitrary file-overwrite operations via the WHM Zone Template editor (SEC-226).CVE-2017-18464 · Websites & servers · Cpanel · reported by MITREMedium 4.9
cPanel before 62.0.17 allows arbitrary file-overwrite operations via the WHM Zone Template editor (SEC-226).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 2, 2019cPanel before 62.0.17 allows arbitrary file-read operations via WHM /styled/ URLs (SEC-218).CVE-2017-18457 · Websites & servers · Cpanel · reported by MITREMedium 4.4
cPanel before 62.0.17 allows arbitrary file-read operations via WHM /styled/ URLs (SEC-218).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net news.cpanel.com
Aug 2, 2019cPanel before 62.0.17 allows self XSS in the WHM cPAddons showsecurity interface (SEC-217).CVE-2017-18456 · Websites & servers · Cpanel · reported by MITREMedium 6.1
cPanel before 62.0.17 allows self XSS in the WHM cPAddons showsecurity interface (SEC-217).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net news.cpanel.com
Aug 2, 2019cPanel before 62.0.24 allows stored XSS in the WHM cPAddons install interface (SEC-262).CVE-2017-18454 · Websites & servers · Cpanel · reported by MITREMedium 5.4
cPanel before 62.0.24 allows stored XSS in the WHM cPAddons install interface (SEC-262).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net news.cpanel.com
Aug 2, 2019cPanel before 66.0.2 allows stored XSS during WHM cPAddons processing (SEC-269).CVE-2017-18420 · Websites & servers · Cpanel · reported by MITREMedium 5.4
cPanel before 66.0.2 allows stored XSS during WHM cPAddons processing (SEC-269).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 2, 2019cPanel before 66.0.2 allows stored XSS during WHM cPAddons uninstallation (SEC-266).CVE-2017-18419 · Websites & servers · Cpanel · reported by MITREMedium 5.4
cPanel before 66.0.2 allows stored XSS during WHM cPAddons uninstallation (SEC-266).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 2, 2019cPanel before 66.0.2 allows stored XSS during WHM cPAddons file operations (SEC-265).CVE-2017-18418 · Websites & servers · Cpanel · reported by MITREMedium 5.4
cPanel before 66.0.2 allows stored XSS during WHM cPAddons file operations (SEC-265).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 2, 2019cPanel before 66.0.2 allows stored XSS during WHM cPAddons installation (SEC-263).CVE-2017-18417 · Websites & servers · Cpanel · reported by MITREMedium 5.4
cPanel before 66.0.2 allows stored XSS during WHM cPAddons installation (SEC-263).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 2, 2019cPanel before 67.9999.103 allows stored XSS in WHM MySQL Password Change interfaces (SEC-282).CVE-2017-18408 · Websites & servers · Cpanel · reported by MITREMedium 5.4
cPanel before 67.9999.103 allows stored XSS in WHM MySQL Password Change interfaces (SEC-282).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net news.cpanel.com
Aug 1, 2019cPanel before 68.0.27 allows self XSS in the WHM listips interface (SEC-389).CVE-2018-20953 · Websites & servers · Cpanel · reported by MITREMedium 6.1
cPanel before 68.0.27 allows self XSS in the WHM listips interface (SEC-389).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 68.0.27 creates world-readable files during use of WHM Apache Includes Editor (SEC-388).CVE-2018-20952 · Websites & servers · Cpanel · reported by MITREMedium 6.5
cPanel before 68.0.27 creates world-readable files during use of WHM Apache Includes Editor (SEC-388).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 68.0.27 allows self XSS in WHM Spamd Startup Config (SEC-387).CVE-2018-20951 · Websites & servers · Cpanel · reported by MITREMedium 6.1
cPanel before 68.0.27 allows self XSS in WHM Spamd Startup Config (SEC-387).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net news.cpanel.com
Aug 1, 2019cPanel before 68.0.27 allows self stored XSS in WHM Account Transfer (SEC-386).CVE-2018-20950 · Websites & servers · Cpanel · reported by MITREMedium 6.1
cPanel before 68.0.27 allows self stored XSS in WHM Account Transfer (SEC-386).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net news.cpanel.com
Aug 1, 2019cPanel before 68.0.27 allows self XSS in WHM Apache Configuration Include Editor (SEC-385).CVE-2018-20949 · Websites & servers · Cpanel · reported by MITREMedium 6.1
cPanel before 68.0.27 allows self XSS in WHM Apache Configuration Include Editor (SEC-385).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net news.cpanel.com
Aug 1, 2019cPanel before 68.0.27 does not enforce ownership during addpkgext and delpkgext WHM API calls (SEC-324).CVE-2018-20938 · Websites & servers · Cpanel · reported by MITRELow 2.7
cPanel before 68.0.27 does not enforce ownership during addpkgext and delpkgext WHM API calls (SEC-324).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 55.9999.141 allows self stored XSS in WHM Edit System Mail Preferences (SEC-96).CVE-2016-10827 · Websites & servers · Cpanel · reported by MITREMedium 5.4
cPanel before 55.9999.141 allows self stored XSS in WHM Edit System Mail Preferences (SEC-96).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net news.cpanel.com
Aug 1, 2019cPanel before 70.0.23 allows stored XSS in via a WHM "Reset a DNS Zone" action (SEC-412).CVE-2018-20935 · Websites & servers · Cpanel · reported by MITREMedium 5.4
cPanel before 70.0.23 allows stored XSS in via a WHM "Reset a DNS Zone" action (SEC-412).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net news.cpanel.com
Aug 1, 2019cPanel before 70.0.23 has Stored XSS via an WHM Edit DNS Zone action (SEC-410).CVE-2018-20933 · Websites & servers · Cpanel · reported by MITREMedium 5.4
cPanel before 70.0.23 has Stored XSS via an WHM Edit DNS Zone action (SEC-410).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 70.0.23 allows local privilege escalation via the WHM Locale XML Upload interface (SEC-380).CVE-2018-20926 · Websites & servers · Cpanel · reported by MITREMedium 6.7
cPanel before 70.0.23 allows local privilege escalation via the WHM Locale XML Upload interface (SEC-380).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 70.0.23 allows local privilege escalation via the WHM Legacy Language File Upload interface (SEC-379).CVE-2018-20925 · Websites & servers · Cpanel · reported by MITREMedium 6.7
cPanel before 70.0.23 allows local privilege escalation via the WHM Legacy Language File Upload interface (SEC-379).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 70.0.23 allows arbitrary file-read and file-unlink operations via WHM style uploads (SEC-378).CVE-2018-20924 · Websites & servers · Cpanel · reported by MITREMedium 5.5
cPanel before 70.0.23 allows arbitrary file-read and file-unlink operations via WHM style uploads (SEC-378).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net news.cpanel.com
Aug 1, 2019cPanel before 70.0.23 allows stored XSS via a WHM Synchronize DNS Records action (SEC-377).CVE-2018-20923 · Websites & servers · Cpanel · reported by MITREMedium 6.1
cPanel before 70.0.23 allows stored XSS via a WHM Synchronize DNS Records action (SEC-377).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 70.0.23 allows stored XSS via a WHM DNS Cleanup action (SEC-376).CVE-2018-20922 · Websites & servers · Cpanel · reported by MITREMedium 6.1
cPanel before 70.0.23 allows stored XSS via a WHM DNS Cleanup action (SEC-376).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 70.0.23 allows stored XSS via a WHM "Delete a DNS Zone" action (SEC-375).CVE-2018-20921 · Websites & servers · Cpanel · reported by MITREMedium 6.1
cPanel before 70.0.23 allows stored XSS via a WHM "Delete a DNS Zone" action (SEC-375).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action (SEC-374).CVE-2018-20920 · Websites & servers · Cpanel · reported by MITREMedium 6.1
cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action (SEC-374).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 70.0.23 allows stored XSS via a WHM Create Account action (SEC-373).CVE-2018-20919 · Websites & servers · Cpanel · reported by MITREMedium 6.1
cPanel before 70.0.23 allows stored XSS via a WHM Create Account action (SEC-373).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 70.0.23 allows stored XSS in WHM DNS Cluster (SEC-372).CVE-2018-20918 · Websites & servers · Cpanel · reported by MITREMedium 6.1
cPanel before 70.0.23 allows stored XSS in WHM DNS Cluster (SEC-372).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 70.0.23 allows Stored XSS via a WHM Edit MX Entry (SEC-370).CVE-2018-20916 · Websites & servers · Cpanel · reported by MITREMedium 5.4
cPanel before 70.0.23 allows Stored XSS via a WHM Edit MX Entry (SEC-370).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action (SEC-369).CVE-2018-20915 · Websites & servers · Cpanel · reported by MITREMedium 5.4
cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action (SEC-369).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 70.0.23 allows attackers to read the root accesshash via the WHM /cgi/trustclustermaster.cgi (SEC-364).CVE-2018-20913 · Websites & servers · Cpanel · reported by MITREMedium 4.9
cPanel before 70.0.23 allows attackers to read the root accesshash via the WHM /cgi/trustclustermaster.cgi (SEC-364).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 70.0.23 allows self XSS in the WHM cPAddons showsecurity Interface (SEC-357).CVE-2018-20910 · Websites & servers · Cpanel · reported by MITREMedium 6.1
cPanel before 70.0.23 allows self XSS in the WHM cPAddons showsecurity Interface (SEC-357).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 71.9980.37 allows self XSS in the WHM Backup Configuration interface (SEC-421).CVE-2018-20903 · Websites & servers · Cpanel · reported by MITREMedium 6.1
cPanel before 71.9980.37 allows self XSS in the WHM Backup Configuration interface (SEC-421).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 71.9980.37 allows Remote-Stored XSS in WHM Save Theme Interface (SEC-400).CVE-2018-20901 · Websites & servers · Cpanel · reported by MITREMedium 6.1
cPanel before 71.9980.37 allows Remote-Stored XSS in WHM Save Theme Interface (SEC-400).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 11.54.0.0 allows unauthorized zone modification via the WHM API (SEC-66).CVE-2016-10860 · Websites & servers · Cpanel · reported by MITREHigh 8.1
cPanel before 11.54.0.0 allows unauthorized zone modification via the WHM API (SEC-66).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 11.54.0.4 allows stored XSS in the WHM Feature Manager interface (SEC-86).CVE-2016-10853 · Websites & servers · Cpanel · reported by MITREMedium 5.4
cPanel before 11.54.0.4 allows stored XSS in the WHM Feature Manager interface (SEC-86).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net news.cpanel.com
Aug 1, 2019cPanel before 11.54.0.4 allows self XSS in the WHM PHP Configuration editor interface (SEC-84).CVE-2016-10851 · Websites & servers · Cpanel · reported by MITREMedium 5.4
cPanel before 11.54.0.4 allows self XSS in the WHM PHP Configuration editor interface (SEC-84).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net forums.cpanel.net
Aug 1, 2019cPanel before 71.9980.37 allows stored XSS in the WHM cPAddons installation interface (SEC-398).CVE-2018-20899 · Websites & servers · Cpanel · reported by MITREMedium 6.1
cPanel before 71.9980.37 allows stored XSS in the WHM cPAddons installation interface (SEC-398).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net news.cpanel.com
Aug 1, 2019cPanel before 71.9980.37 allows code injection in the WHM cPAddons interface (SEC-394).CVE-2018-20896 · Websites & servers · Cpanel · reported by MITRELow 3.9
cPanel before 71.9980.37 allows code injection in the WHM cPAddons interface (SEC-394).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net news.cpanel.com
Aug 1, 2019cPanel before 74.0.0 allows stored XSS in the WHM File Restoration interface (SEC-367).CVE-2018-20884 · Websites & servers · Cpanel · reported by MITREMedium 5.4
cPanel before 74.0.0 allows stored XSS in the WHM File Restoration interface (SEC-367).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 74.0.8 allows arbitrary file-write operations in the context of the root account during WHM Force Password Change (SEC-447).CVE-2018-20882 · Websites & servers · Cpanel · reported by MITREMedium 6.8
cPanel before 74.0.8 allows arbitrary file-write operations in the context of the root account during WHM Force Password Change (SEC-447).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net news.cpanel.com

Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.

Weekly security brief

The flaws that hit local websites, every Friday.

One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.

Vulnerability database

The flaws that hit local websites, every Friday.

Tell us what you're building.