WP Toolkit for cPanel CVE-2026-87900: Argument Injection
WP Toolkit for cPanel is affected by CVE-2026-87900. Argument injection in WP Toolkit for cPanel 6.11.2-10794 and earlier allows remote authenticated users to read arbitrary files and execute arbitrary code across customer accounts. Affected versions: 6.11.2-10794 and earlier. Fixed in 6.11.3-10850. CVSS base score: 9.4.
प्रभावित संस्करण
6.11.2-10794 and earlier
पैच किया गया संस्करण
6.11.3-10850
डिफ़ॉल्ट अपडेट कमांड
bash <(curl -SsL https://wp-toolkit.plesk.com/cPanel/installer.sh) --version 6.11.3सुधार कमांड
All supported operating systems
# WP Toolkit (package wp-toolkit-cpanel) updates independently of cPanel & WHM
bash <(curl -SsL https://wp-toolkit.plesk.com/cPanel/installer.sh || wget -qO- https://wp-toolkit.plesk.com/cPanel/installer.sh) --version 6.11.3SharedLicense लाइसेंस के तहत इसका अर्थ
Your SharedLicense cPanel license itself is not affected — this is a vulnerability in WP Toolkit for cPanel, not in licensing. Licenses continue to work during and after the update; there is no need to re-issue or re-activate anything. If you resell under your own brand, patch client servers too — unpatched installs put your reputation at risk, not your license.
Argument injection in WP Toolkit for cPanel 6.11.2-10794 and earlier allows remote authenticated users to read arbitrary files and execute arbitrary code across customer accounts.
Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-87900
अक्सर पूछे जाने वाले प्रश्न
What is CVE-2026-87900?
Is CVE-2026-87900 being exploited in the wild?
How do I fix CVE-2026-87900?
Which versions are affected?
अपने सिस्टम में भेद्यताओं की जाँच करें
अपना उत्पाद और ऑपरेटिंग सिस्टम चुनें ताकि आपके लिए लागू सटीक फिक्स कमांड देख सकें।
अपना सिस्टम जाँचें