Updated 11 h ago

Vulnerability database

Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.

1,762exploited flaws on CISA’s list

34added in the last 30 days

343new WordPress flaws this week

390,080entries in the database

488 results · page 7 of 10

Aug 1, 2019cPanel before 55.9999.141 allows unauthenticated arbitrary code execution via DNS NS entry poisoning (SEC-90).CVE-2016-10824 · Websites & servers · Cpanel · reported by MITRECritical 9.8
cPanel before 55.9999.141 allows unauthenticated arbitrary code execution via DNS NS entry poisoning (SEC-90).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net news.cpanel.com
Aug 1, 2019cPanel before 55.9999.141 allows arbitrary code execution in the context of the root account because of MakeText interpolation (SEC-89).CVE-2016-10823 · Websites & servers · Cpanel · reported by MITREHigh 8.8
cPanel before 55.9999.141 allows arbitrary code execution in the context of the root account because of MakeText interpolation (SEC-89).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 55.9999.141 allows self XSS in X3 Reseller Branding Images (SEC-88).CVE-2016-10822 · Websites & servers · Cpanel · reported by MITREMedium 5.4
cPanel before 55.9999.141 allows self XSS in X3 Reseller Branding Images (SEC-88).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net news.cpanel.com
Aug 1, 2019cPanel before 70.0.23 allows stored XSS in via a WHM "Reset a DNS Zone" action (SEC-412).CVE-2018-20935 · Websites & servers · Cpanel · reported by MITREMedium 5.4
cPanel before 70.0.23 allows stored XSS in via a WHM "Reset a DNS Zone" action (SEC-412).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net news.cpanel.com
Aug 1, 2019cPanel before 70.0.23 does not prevent e-mail account suspensions from being applied to unowned accounts (SEC-411).CVE-2018-20934 · Websites & servers · Cpanel · reported by MITREMedium 6.5
cPanel before 70.0.23 does not prevent e-mail account suspensions from being applied to unowned accounts (SEC-411).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 70.0.23 has Stored XSS via an WHM Edit DNS Zone action (SEC-410).CVE-2018-20933 · Websites & servers · Cpanel · reported by MITREMedium 5.4
cPanel before 70.0.23 has Stored XSS via an WHM Edit DNS Zone action (SEC-410).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 70.0.23 exposes Apache HTTP Server logs after creation of certain domains (SEC-406).CVE-2018-20932 · Websites & servers · Cpanel · reported by MITRELow 2.7
cPanel before 70.0.23 exposes Apache HTTP Server logs after creation of certain domains (SEC-406).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 70.0.23 allows demo accounts to execute code via the Landing Page (SEC-405).CVE-2018-20931 · Websites & servers · Cpanel · reported by MITREMedium 6.3
cPanel before 70.0.23 allows demo accounts to execute code via the Landing Page (SEC-405).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 70.0.23 allows .htaccess restrictions bypass when Htaccess Optimization is enabled (SEC-401).CVE-2018-20930 · Websites & servers · Cpanel · reported by MITREMedium 6.5
cPanel before 70.0.23 allows .htaccess restrictions bypass when Htaccess Optimization is enabled (SEC-401).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 70.0.23 allows an open redirect via the /unprotected/redirect.html endpoint (SEC-392).CVE-2018-20929 · Websites & servers · Cpanel · reported by MITREMedium 6.1
cPanel before 70.0.23 allows an open redirect via the /unprotected/redirect.html endpoint (SEC-392).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net news.cpanel.com
Aug 1, 2019cPanel before 70.0.23 allows stored XSS via the cpaddons vendor interface (SEC-391).CVE-2018-20928 · Websites & servers · Cpanel · reported by MITREMedium 6.1
cPanel before 70.0.23 allows stored XSS via the cpaddons vendor interface (SEC-391).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net news.cpanel.com
Aug 1, 2019cPanel before 70.0.23 allows jailshell escape because of incorrect crontab parsing (SEC-382).CVE-2018-20927 · Websites & servers · Cpanel · reported by MITRELow 3.8
cPanel before 70.0.23 allows jailshell escape because of incorrect crontab parsing (SEC-382).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 70.0.23 allows local privilege escalation via the WHM Locale XML Upload interface (SEC-380).CVE-2018-20926 · Websites & servers · Cpanel · reported by MITREMedium 6.7
cPanel before 70.0.23 allows local privilege escalation via the WHM Locale XML Upload interface (SEC-380).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 70.0.23 allows local privilege escalation via the WHM Legacy Language File Upload interface (SEC-379).CVE-2018-20925 · Websites & servers · Cpanel · reported by MITREMedium 6.7
cPanel before 70.0.23 allows local privilege escalation via the WHM Legacy Language File Upload interface (SEC-379).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 70.0.23 allows arbitrary file-read and file-unlink operations via WHM style uploads (SEC-378).CVE-2018-20924 · Websites & servers · Cpanel · reported by MITREMedium 5.5
cPanel before 70.0.23 allows arbitrary file-read and file-unlink operations via WHM style uploads (SEC-378).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net news.cpanel.com
Aug 1, 2019cPanel before 11.54.0.4 allows certain file-chmod operations in scripts/secureit (SEC-82).CVE-2016-10849 · Websites & servers · Cpanel · reported by MITREMedium 6.5
cPanel before 11.54.0.4 allows certain file-chmod operations in scripts/secureit (SEC-82).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 11.54.0.4 allows arbitrary file-overwrite operations in scripts/quotacheck (SEC-81).CVE-2016-10848 · Websites & servers · Cpanel · reported by MITREHigh 7.2
cPanel before 11.54.0.4 allows arbitrary file-overwrite operations in scripts/quotacheck (SEC-81).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net news.cpanel.com
Aug 1, 2019cPanel before 11.54.0.4 allows arbitrary file-read and file-write operations via scripts/fixmailboxpath (SEC-80).CVE-2016-10847 · Websites & servers · Cpanel · reported by MITREHigh 8.1
cPanel before 11.54.0.4 allows arbitrary file-read and file-write operations via scripts/fixmailboxpath (SEC-80).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net news.cpanel.com
Aug 1, 2019cPanel before 11.54.0.4 allows arbitrary file-chown and file-chmod operations during Roundcube database conversions (SEC-79).CVE-2016-10846 · Websites & servers · Cpanel · reported by MITREHigh 8.1
cPanel before 11.54.0.4 allows arbitrary file-chown and file-chmod operations during Roundcube database conversions (SEC-79).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 11.54.0.4 allows arbitrary file-overwrite operations in scripts/check_system_storable (SEC-78).CVE-2016-10845 · Websites & servers · Cpanel · reported by MITREHigh 8.1
cPanel before 11.54.0.4 allows arbitrary file-overwrite operations in scripts/check_system_storable (SEC-78).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019The chcpass script in cPanel before 11.54.0.4 reveals a password hash (SEC-77).CVE-2016-10844 · Websites & servers · Cpanel · reported by MITREMedium 6.5
The chcpass script in cPanel before 11.54.0.4 reveals a password hash (SEC-77).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net news.cpanel.com
Aug 1, 2019cPanel before 11.54.0.4 allows code execution in the context of shared users via JSON-API (SEC-76).CVE-2016-10843 · Websites & servers · Cpanel · reported by MITREHigh 8.1
cPanel before 11.54.0.4 allows code execution in the context of shared users via JSON-API (SEC-76).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 11.54.0.4 allows certain file-read operations in bin/setup_global_spam_filter.pl (SEC-74).CVE-2016-10842 · Websites & servers · Cpanel · reported by MITREMedium 6.5
cPanel before 11.54.0.4 allows certain file-read operations in bin/setup_global_spam_filter.pl (SEC-74).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019The bin/mkvhostspasswd script in cPanel before 11.54.0.4 discloses password hashes (SEC-73).CVE-2016-10841 · Websites & servers · Cpanel · reported by MITREMedium 5.3
The bin/mkvhostspasswd script in cPanel before 11.54.0.4 discloses password hashes (SEC-73).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net news.cpanel.com
Aug 1, 2019cPanel before 11.54.0.4 allows arbitrary code execution during locale duplication (SEC-72).CVE-2016-10840 · Websites & servers · Cpanel · reported by MITREHigh 8.8
cPanel before 11.54.0.4 allows arbitrary code execution during locale duplication (SEC-72).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 11.54.0.4 allows SQL injection in bin/horde_update_usernames (SEC-71).CVE-2016-10839 · Websites & servers · Cpanel · reported by MITREHigh 8.1
cPanel before 11.54.0.4 allows SQL injection in bin/horde_update_usernames (SEC-71).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 11.54.0.4 allows arbitrary file-read operations via the bin/fmq script (SEC-70).CVE-2016-10838 · Websites & servers · Cpanel · reported by MITREMedium 6.5
cPanel before 11.54.0.4 allows arbitrary file-read operations via the bin/fmq script (SEC-70).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 11.54.0.4 allows arbitrary code execution because of an unsafe @INC path (SEC-46).CVE-2016-10837 · Websites & servers · Cpanel · reported by MITREHigh 7.5
cPanel before 11.54.0.4 allows arbitrary code execution because of an unsafe @INC path (SEC-46).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 55.9999.141 allows arbitrary file-read operations during authentication with caldav (SEC-108).CVE-2016-10836 · Websites & servers · Cpanel · reported by MITREMedium 6.5
cPanel before 55.9999.141 allows arbitrary file-read operations during authentication with caldav (SEC-108).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 70.0.23 allows stored XSS via a WHM Synchronize DNS Records action (SEC-377).CVE-2018-20923 · Websites & servers · Cpanel · reported by MITREMedium 6.1
cPanel before 70.0.23 allows stored XSS via a WHM Synchronize DNS Records action (SEC-377).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 70.0.23 allows stored XSS via a WHM DNS Cleanup action (SEC-376).CVE-2018-20922 · Websites & servers · Cpanel · reported by MITREMedium 6.1
cPanel before 70.0.23 allows stored XSS via a WHM DNS Cleanup action (SEC-376).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 70.0.23 allows stored XSS via a WHM "Delete a DNS Zone" action (SEC-375).CVE-2018-20921 · Websites & servers · Cpanel · reported by MITREMedium 6.1
cPanel before 70.0.23 allows stored XSS via a WHM "Delete a DNS Zone" action (SEC-375).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action (SEC-374).CVE-2018-20920 · Websites & servers · Cpanel · reported by MITREMedium 6.1
cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action (SEC-374).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 70.0.23 allows stored XSS via a WHM Create Account action (SEC-373).CVE-2018-20919 · Websites & servers · Cpanel · reported by MITREMedium 6.1
cPanel before 70.0.23 allows stored XSS via a WHM Create Account action (SEC-373).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 70.0.23 allows stored XSS in WHM DNS Cluster (SEC-372).CVE-2018-20918 · Websites & servers · Cpanel · reported by MITREMedium 6.1
cPanel before 70.0.23 allows stored XSS in WHM DNS Cluster (SEC-372).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 70.0.23 allows any user to disable Solr (SEC-371).CVE-2018-20917 · Websites & servers · Cpanel · reported by MITREMedium 5.5
cPanel before 70.0.23 allows any user to disable Solr (SEC-371).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 70.0.23 allows Stored XSS via a WHM Edit MX Entry (SEC-370).CVE-2018-20916 · Websites & servers · Cpanel · reported by MITREMedium 5.4
cPanel before 70.0.23 allows Stored XSS via a WHM Edit MX Entry (SEC-370).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action (SEC-369).CVE-2018-20915 · Websites & servers · Cpanel · reported by MITREMedium 5.4
cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action (SEC-369).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019In cPanel before 70.0.23, OpenID providers can inject arbitrary data into cPanel session files (SEC-368).CVE-2018-20914 · Websites & servers · Cpanel · reported by MITREHigh 7.3
In cPanel before 70.0.23, OpenID providers can inject arbitrary data into cPanel session files (SEC-368).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 70.0.23 allows attackers to read the root accesshash via the WHM /cgi/trustclustermaster.cgi (SEC-364).CVE-2018-20913 · Websites & servers · Cpanel · reported by MITREMedium 4.9
cPanel before 70.0.23 allows attackers to read the root accesshash via the WHM /cgi/trustclustermaster.cgi (SEC-364).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 70.0.23 allows demo accounts to execute code via awstats (SEC-362).CVE-2018-20912 · Websites & servers · Cpanel · reported by MITREMedium 6.3
cPanel before 70.0.23 allows demo accounts to execute code via awstats (SEC-362).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 70.0.23 allows code execution because "." is in @INC during a Perl syntax check of cpaddonsup (SEC-359).CVE-2018-20911 · Websites & servers · Cpanel · reported by MITREHigh 7.2
cPanel before 70.0.23 allows code execution because "." is in @INC during a Perl syntax check of cpaddonsup (SEC-359).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 70.0.23 allows self XSS in the WHM cPAddons showsecurity Interface (SEC-357).CVE-2018-20910 · Websites & servers · Cpanel · reported by MITREMedium 6.1
cPanel before 70.0.23 allows self XSS in the WHM cPAddons showsecurity Interface (SEC-357).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 70.0.23 allows arbitrary file-chmod operations during legacy incremental backups (SEC-338).CVE-2018-20909 · Websites & servers · Cpanel · reported by MITREHigh 7.1
cPanel before 70.0.23 allows arbitrary file-chmod operations during legacy incremental backups (SEC-338).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 71.9980.37 allows arbitrary file-read operations during pkgacct custom template handling (SEC-435).CVE-2018-20908 · Websites & servers · Cpanel · reported by MITREMedium 5.5
cPanel before 71.9980.37 allows arbitrary file-read operations during pkgacct custom template handling (SEC-435).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 71.9980.37 does not enforce the Mime::list_hotlinks API feature restriction (SEC-432).CVE-2018-20907 · Websites & servers · Cpanel · reported by MITREMedium 4.3
cPanel before 71.9980.37 does not enforce the Mime::list_hotlinks API feature restriction (SEC-432).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 71.9980.37 allows attackers to make API calls that bypass the images feature restriction (SEC-430).CVE-2018-20906 · Websites & servers · Cpanel · reported by MITREMedium 4.3
cPanel before 71.9980.37 allows attackers to make API calls that bypass the images feature restriction (SEC-430).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 71.9980.37 allows attackers to make API calls that bypass the backup feature restriction (SEC-429).CVE-2018-20905 · Websites & servers · Cpanel · reported by MITREMedium 5.4
cPanel before 71.9980.37 allows attackers to make API calls that bypass the backup feature restriction (SEC-429).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 71.9980.37 allows attackers to make API calls that bypass the cron feature restriction (SEC-427).CVE-2018-20904 · Websites & servers · Cpanel · reported by MITREMedium 4.3
cPanel before 71.9980.37 allows attackers to make API calls that bypass the cron feature restriction (SEC-427).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 71.9980.37 allows self XSS in the WHM Backup Configuration interface (SEC-421).CVE-2018-20903 · Websites & servers · Cpanel · reported by MITREMedium 6.1
cPanel before 71.9980.37 allows self XSS in the WHM Backup Configuration interface (SEC-421).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net

Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.

Weekly security brief

The flaws that hit local websites, every Friday.

One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.

Vulnerability database

The flaws that hit local websites, every Friday.

Tell us what you're building.