WHMPress vulnerabilities
We track 2 vulnerabilities in WHMPress products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on February 28, 2025.
2vulnerabilities
1critical
1high
0exploited
9.3average CVSS score
Latest WHMPress vulnerabilities
- 8.8 High severity
WHMCS Client Area for WordPress by WHMpress: Missing Authorization
The WHMPress - WHMCS Client Area plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the update_settings case in the /admin/ajax.php file in all versions up to, and
- 9.8 Critical severity
WHMpress - WHMCS WordPress Integration Plugin: Improper Control of Filename for Include/Require Statement in PHP Program
The WHMpress - WHMCS WordPress Integration Plugin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 6.3-revision-0 via the whmpress_domain_search_ajax_extended_results() function. This makes it possible for unauth