CVE-2026-93699

Argument injection in WP Toolkit for cPanel allows local users to execute arbitrary code as other…

Risk score: 52/100
CVSS: 8.5 v4.0
Exploit chance (30 days): 0.1%
Published: 8 Oct 2026

Open in the live forecast Today's forecast

What to know

What it is: Argument injection in WP Toolkit for cPanel allows local users to execute arbitrary code as other accounts on the same server.
Affected: See advisory
Fix: Apply the vendor's security update; see the linked advisory.
Exploitation: No known exploitation

Why it is Yellow

CVSS 8.5 high

References

https://support.cpanel.net/hc/en-us/articles/43874620756759-Security-CVE-2026-93699-Vulnerability-in-WP-Toolkit-s-Handler-September-30-2026

Original description

Argument injection in WP Toolkit for cPanel allows local users to execute arbitrary code as other accounts on the same server.

Last activity 8 Oct 2026. Patch Forecast updates every hour.