A critical-severity authentication bypass vulnerability in cPanel & WHM has been exploited as a zero-day since February 2026.
The Quick Page/Post Redirect plugin, installed on more than 70,000 WordPress sites, had a backdoor added five years ago that ...