+- Host Chat - Web Hosting, Connectivity & Datacentre Forum (https://www.hostchat.uk)
+-- Forum: Tech & Security News (https://www.hostchat.uk/forumdisplay.php?fid=8)
+--- Forum: Security News (https://www.hostchat.uk/forumdisplay.php?fid=10)
+--- Thread: Security: SEC-73755 cPanel & WHM / WP2 Security Update (/showthread.php?tid=1)
Security: SEC-73755 cPanel & WHM / WP2 Security Update - hcadmin - 05-20-2026
Situation
A vulnerability has been reported that currently affects cPanel & WHM versions 132 and higher.
Impact
We have pushed out a patch for the following cPanel & WHM versions:
11.132.0.35 and higher
11.134.0.29 and higher
11.136.0.13 and higher
We have pushed out a patch for the following WP Squared version:
11.136.1.16 and higher
Note: All further versions of cPanel are patched for this issue as well. Please see the latest changelogs for version information of each cPanel branch:
https://docs.cpanel.net/changelogs/
Call to Action
Update the cPanel version on the server to one of the versions listed above. This can be done with the following:
Code:
/scripts/upcp --forceOnce completed, verify the cPanel version with the following to ensure the update was successful.
Code:
/usr/local/cpanel/cpanel -VIf you are not able to update, then it is recommended that you block inbound traffic on ports 2079 and 2080 at the firewall until you are able to proceed with the upgrade.
https://support.cpanel.net/hc/en-us/articles/40555594160023-Security-SEC-73755-cPanel-WHM-WP2-Security-Update-May-19-2026