CVE Intelligence

WebPros WHMCS vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting WebPros WHMCS: 1 record(s), with affected versions and fixes.

CVE-2026-29204 Critical · 9.1 CWE-639 May 12, 2026
WHMCS Authorization Bypass via addonId in Client Area
Insufficient ownership check in `clientarea.php` allows an authenticated client area user to submit requests using another user’s `addonId` without any ownership validation leading to unauthorized access to the victim's account.