PT-2026-107868 · Webpros · Wp Toolkit

·

CVE-2026-93699

·

Published

2026-10-08

·

Updated

2026-10-08

CVSS v4.0

8.5

High

VectorAV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Argument injection in WP Toolkit for cPanel allows local users to execute arbitrary code as other accounts on the same server.

Fix

Argument Injection

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-93699

Affected Products

Wp Toolkit