MEIFP – Most Exploited Internet-Facing Products

WebPros

Products: WHM · WP Squared · cPanel

40.6

Score

CVEs

Active

PoC

KEV

#90

Rank

Period:

Product:

CVE ID	Published	CVSS	Exploit	KEV	AC	PR	Auto	Score(hover)	Affected Products	Description
CVE-2026-41940	2026-04-29	9.3v4.0	ACTIVE		Low	None	YES	40.6	cPanelWHMWP Squared	cPanel and WHM versions after 11.40 contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the control panel.

Each CVE: 10 pts base (Active only), boosted by:

KEV×2.0AC: Low×1.2PR: None×1.3PR: Low×1.1Auto×1.3