CVE-2026-87900

WP Toolkit for cPanel versions 6.11.2-10794 and earlier are vulnerable to argument injection, enabling remote authenticated users to read arbitrary files and execute code across different customer accounts. This critical vulnerability poses a significant risk of unauthorized access and potential compromise of sensitive data. Hosting providers and administrators utilizing affected versions should prioritize immediate patching to mitigate the risk of exploitation.