Section

Vulnerabilities

CVE records from NVD, ZDI advisories and the CISA KEV catalog, with CVSS, EPSS, SSVC and exploitation state.

3 matching records.

1. 38
   CVE NVD 1h ago

   The Plesk extension "Site Import" before 1.13.2 does not properly validate domain and session identifiers, allowing path traversal.

   The Plesk extension "Site Import" before 1.13.2 does not properly validate domain and session identifiers, allowing path traversal. This lets a non-owner subscription user redirect a privileged backend session into a directory…

   CVSS 9.2 CVE-2026-107246 WebPros Web platform
2. 15
   CVE NVD 7d ago

   Improper neutralization of a NUL byte in cPanel allows remote attackers to read any mail account's calendar and contact data.

   Improper neutralization of a NUL byte in cPanel allows remote attackers to read any mail account's calendar and contact data.

   CVSS 8.7 CVE-2026-105475 WebPros Web platform
3. 5
   CVE NVD 7d ago

   Improper link resolution before file access in cPanel allows remote authenticated users to write arbitrary root-owned files and escalate privileges.

   Improper link resolution before file access in cPanel allows remote authenticated users to write arbitrary root-owned files and escalate privileges.

   CVE-2026-105476 WebPros Web platform

Same filters as JSON: /api/items?category=vuln&window=30d&vendor=WebPros&limit=100. RSS for this section: feed.xml.