WHM Plugin vulnerabilities

1 known vulnerability in WHM Plugin from LiteSpeed Technologies. 1 is rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  LiteSpeed cPanel Plugin Privilege Escalation Exploited

  CVE-2026-48172May 21, 2026LiteSpeed TechnologiesEPSS 17.9%

  LiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation (possibly to root), as exploited in the wild in May 2026. Detection is best done via a command line of grep -rE "cpanel_jsonapi_func=redisAble" /var/cpanel/logs /usr/local/cpanel/logs/ 2