Wp Toolkit
Monthly
Argument injection in WP Toolkit for cPanel allows local, low-privilege users with a valid hosting account to execute arbitrary code as other accounts on the same server. The vulnerability requires a multi-tenant deployment where untrusted local accounts coexist with WP Toolkit, as it is not remotely exploitable and needs no victim interaction. No public exploit code has been identified, but its high impact makes it a mid-to-high priority for shared and reseller hosting providers to patch promptly.
Argument injection in WP Toolkit for cPanel allows local, low-privilege users with a valid hosting account to execute arbitrary code as other accounts on the same server. The vulnerability requires a multi-tenant deployment where untrusted local accounts coexist with WP Toolkit, as it is not remotely exploitable and needs no victim interaction. No public exploit code has been identified, but its high impact makes it a mid-to-high priority for shared and reseller hosting providers to patch promptly.