Exposure of WHMCS

CMS

12

exposure score

1,672

sites use

0

exploited

1

critical

CVEs

1 result

CVE-2026-29204CRITICALInsufficient ownership check in `clientarea.php` allows an authenticated client area user to submit requests using another user’s `addonId` EPSS 0.3%

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →