Security Advisory: New Blind SQL Injection Vulnerability in Plesk's XML-RPC API

First posted on Tuesday, 28 July 2026 This advisory is provided as a courtesy. We want to bring to your attention a newly discovered vulnerability in all versions of Plesk hosting control panel. The security vulnerability allows a remote authenticated low-privileged user to perform SQL injection and read arbitrary data from the Plesk database through Plesk's XML-RPC API. Impact: An ...

Security Advisory: New High Severity Vulnerabilities in WHM/cPanel

First posted on Tuesday, 19 May 2026 This advisory is provided as a courtesy. We want to bring to your attention some newly discovered vulnerabilities across versions of cPanel and WHM. The CVE details have not been published for security reasons. A cPanel and WHM security patch is expected to be released on Wednesday, 20 May 2026 at 08:00pm Singapore time (GMT+0800). When the security patch ...

Security Advisory: High Severity Vulnerabilities in WHM/cPanel

First posted on Wednesday, 13 May 2026 This advisory is provided as a courtesy. We want to bring to your attention some newly discovered vulnerabilities across versions of cPanel and WHM. These vulnerabilities have been assigned CVE numbers: CVE-2026-29205, CVE-2026-29206, CVE-2026-32991, CVE-2026-32992 and CVE-2026-32993. A cPanel and WHM security patch is expected to be released on Thursday, ...