WordPress security by component

WHMpress - WHMCS WordPress Integration Plugin

Plugin description

WHMpress - WHMCS WordPress Integration Plugin is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Feb 28, 2025; the highest CVE/CNA score is 9.8.

Plugin slug: whmcs

Latest vulnerability

CVE-2024-9193: WHMpress - WHMCS WordPress Integration Plugin: Filesystem traversal

WHMpress - WHMCS WordPress Integration Plugin is affected by filesystem traversal. The vulnerable path is reachable without authentication. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.

PublishedFeb 28, 2025

Safe version guidanceSee mitigation notes

		Safe version
Feb 28, 2025	CVE-2024-9193 WHMpress - WHMCS WordPress Integration Plugin: Filesystem traversal WHMpress - WHMCS WordPress Integration Plugin is affected by filesystem traversal. The vulnerable path is reachable without authentication. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.	See mitigation notes	CVE9.8 NVD9.8