Web Hosting Archives • Daily CyberSecurity

cPanel Patches PHP2Shell Flaws and WP Toolkit Bug Affecting Shared Hosting Servers

cPanel PHP update fixes PHP2Shell flaws and WP Toolkit vulnerability

cPanel Patches PHP2Shell Flaws and WP Toolkit Bug Affecting Shared Hosting Servers

Do Son October 22, 2026

A cPanel PHP update fixes PHP2Shell flaws CVE-2026-109618 and CVE-2026-109619, while WP Toolkit 6.11.5 patches CVE-2026-107663.

Critical WHMCS Vulnerabilities Expose Hosting Servers Diagram illustrating WHMCS vulnerabilities and critical WHMCS vulnerabilities in billing modules

Diagram illustrating WHMCS vulnerabilities and critical WHMCS vulnerabilities in billing modules

Critical WHMCS Vulnerabilities Expose Hosting Servers

Do Son September 16, 2026

WHMCS released patches for critical WHMCS vulnerabilities. Update your billing portal now to prevent data theft and remote code execution attacks.

Cloudflare Launches Drop for Temporary and Permanent Static Site Hosting Cloudflare Drop static website hosting interface with instant global deployment.

Cloudflare Drop static website hosting interface with instant global deployment.

Cloudflare Launches Drop for Temporary and Permanent Static Site Hosting

Do Son July 10, 2026

Cloudflare Drop offers free, rapid hosting for static websites with automatic global CDN acceleration. Claim your site for permanent access.

Exploited in the Wild: PoC Released for cPanel CVE-2026-41940 Authentication Bypass Zero-Day CVE-2026-41940 cPanel Authentication

Exploited in the Wild: PoC Released for cPanel CVE-2026-41940 Authentication Bypass Zero-Day

Do Son April 29, 2026

cPanel issues emergency patches for a critical authentication vulnerability affecting all supported versions. Run /scripts/upcp --force immediately to patch.

Critical Plesk Flaw (CVE-2025-66430) Risks Full Server Takeover via LPE and Apache Config Injection Plesk privilege escalation flaw CVE-2026-44962 patch Plesk LPE, Root Command Execution

Plesk privilege escalation flaw CVE-2026-44962 patch Plesk LPE, Root Command Execution

Critical Plesk Flaw (CVE-2025-66430) Risks Full Server Takeover via LPE and Apache Config Injection

Do Son December 15, 2025

A critical LPE flaw (CVSS 9.1) in Plesk's Password-Protected Directories allows Apache configuration injection. Any Plesk user can execute root commands and achieve full server takeover. Update immediately.

Heads Up, Domain Owners: Price Hikes for Over 200 Extensions Start October 6 Identity Digital, Domain Prices

Heads Up, Domain Owners: Price Hikes for Over 200 Extensions Start October 6

Do Son September 29, 2025

Domain registrar NameCheap is raising prices on 231 domains, including .NEWS, .LIVE, and .WORLD, beginning Oct. 6, 2025. Renew now to avoid the price hike.

CVE-2025-54336 (CVSS 9.8): Critical Flaw in Plesk Obsidian Exposes Servers to Full Compromise CVE-2025-54336 Plesk Vulnerability

CVE-2025-54336 (CVSS 9.8): Critical Flaw in Plesk Obsidian Exposes Servers to Full Compromise

Do Son August 20, 2025

A critical vulnerability (CVE-2025-54336) in Plesk Obsidian could allow attackers to bypass the admin password and take complete control of affected servers.