#vulneablity — Web Hosting News
All web hosting articles tagged #vulneablity — 3 results.
✦ Featured
Other
Most of Hostinger’s Hardest Support Cases No Longer Transfer to a Human. The Human Coaches the AI Instead.
Hostinger has merged its support assistant Kodee with its marketing and SEO agents into Hostinger Agent. The bigger change is behind it: on the one conversation in ten the AI cannot settle alone, a specialist advises it instead of taking over, and hard-case resolution rose from 41 to 72 percent.
Automattic’s Board Put Matt Mullenweg on Paid Leave. He Still Leads the WordPress Project.
Other #automattic#matt-mullenweg
Automattic's board has put Matt Mullenweg on paid leave, with chief financial officer Mark Davies as interim chief executive. The change stops at the commercial company: no change has been announced to his leadership of the WordPress project or to his control of WordPress.org.
Non-Developers Are Building Whole Websites With AI. 20i’s Survey Says Only 31.5% Get a Developer’s Review.
Industry reports #20i#ai
A survey of 600 US non-developers who use AI to write code found 16.3 percent building entire websites, 61 percent testing the results themselves and 31.5 percent having a developer review the code. Separate laboratory testing puts the flaw rate near half.
WHMCS Has an Unauthenticated RCE. The Fix Exists Only for 9.0.8 and 8.13.7.
Security #cve#patch
Two WHMCS advisories on September 3: an unauthenticated remote code execution flaw affecting every build since 8.0, and a 2CheckOut gateway flaw exposing client data in versions from 4.5. Both are fixed in 9.0.8 and 8.13.7, and nothing older gets a patch.
Articles tagged #vulneablity
1–3 of 3
Security
Nearly Two-Thirds of All-in-One WP Migration Installs Remain Unpatched Two Weeks Later
Two weeks after the CVE-2026-19949 patch, WordPress.org statistics show 35 percent of installs on the fixed version, leaving about 3.2 million on a vulnerable version. Wordfence has published the chain from trackback to remote code execution, and Patchstack has raised its rating to medium priority.
Security
Three Unauthenticated File Flaws in a Week, and One Root Cause: Validation by Shortcut
Between July 7 and 9, three serious unauthenticated flaws surfaced in file-handling code: an RCE in Blocksy Companion Pro, arbitrary file deletion in Frontend File Manager, and an SSRF in Monsta FTP. Different codebases, one root cause, and a blast radius that lands on the hosting provider.
Industry reports
CyberPanel vulnerability incident
Today, on the pages of WebHostingTalk.com, a user reported a troubling issue with CyberPanel, drawing immediate attention from the community. The user, “mobin,” shared details of an unusual CPU spike on their server, which, upon investigation, turned out to be the result of crypto-mining malware running with root-level permissions.