The vulnerability in cPanel, WebHost Manager, and WordPress Squared hosting panel lies in the lack of authentication for a critical function, allowing attackers to bypass existing security mechanisms and execute arbitrary code.

The vulnerability in web hosting via cPanel, WebHost Manager, and WordPress Squared hosting panel is related to the lack of authentication for a critical function. Exploiting this vulnerability allows an attacker to bypass existing security mechanisms and execute arbitrary code...

WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability

WebPros cPanel & WHM WebHost Manager and WP2 WordPress Squared contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the control panel...

WordPress Squared premium theme <= 1.38 - Unauthenticated Arbitrary File Upload and Option Deletion

Unauthenticated Arbitrary File Upload and Option Deletion discovered by WordFence in WordPress Squared premium theme versions = 1.38. Solution Update the WordPress Squared premium theme to the latest available version at least 2.0.0...