Jason Nickerson — Hosting Industry InsiderTwo decades
inside the web
as it kept rewriting
itself.

Infrastructure & Hosting Alerts

cPanel & WHM Database Privilege Escalation — Allows low-privileged accounts to escalate to root database access using a public Proof of Concept (PoC) [11].

• CVE / severity: CVE-2026-58048 / High
• Affected versions: cPanel & WHM (Linux) versions not explicitly listed; refer to vendor changelog [11][12].
• Fixed in: Latest patched releases of cPanel & WHM [12].
• Action now:
  • Run /scripts/upcp immediately to ensure the latest security tier is installed.
  • Audit database user permissions and monitor for unauthorized GRANT or administrative commands in SQL logs.

VMware vCenter Server Critical Vulnerability — Broadcom has disclosed a critical-severity advisory that may allow remote compromise of vCenter systems [12].

• CVE / severity: Not explicitly numbered in source; rated Critical [12].
• Affected versions: VMware vCenter Server (versions not disclosed in source).
• Fixed in: Refer to Broadcom/VMware advisory portal.
• Action now:
  • Isolate vCenter management interfaces from the public internet.
  • Apply emergency patches provided by Broadcom immediately.

Namecheap Data Center Outage — A major cooling system failure at a Phoenix data center has caused significant downtime for hosting services and private email systems [9].

• Action now:
  • Infrastructure teams using Namecheap should monitor service status and prepare for manual failover if secondary regions are available.

WordPress Core & Plugin Threats

WordPress Core Authenticated RCE — A high-severity vulnerability in the WordPress core allows authenticated users (with specific permissions) to execute arbitrary code [1][3].

• CVE / severity: CVE-2026-65640 / High
• Affected versions: WordPress core 7.0.x < 7.0.4.
• Fixed in: WordPress 7.0.4.
• Action now:
  • Update WordPress core immediately via wp core update or the dashboard.

Everest Forms Unauthenticated SQL Injection — A critical injection flaw allows attackers to interact with the site database without authentication [5].

• CVE / severity: CVE-2026-66472 / Critical (CVSS 9.8 target).
• Affected versions: Everest Forms (versions not disclosed in source).
• Fixed in: Check for latest plugin updates in the WordPress repository.
• Action now:
  • Update the Everest Forms plugin to the latest version.
  • Deploy WAF rules to block common SQL injection patterns (e.g., UNION SELECT).

Customer Email Verification for WooCommerce Bypass — Failure to correctly validate activation codes allows bypass of email verification steps [6].

• CVE / severity: CVE-2026-14182 / Medium-High.
• Affected versions: Customer Email Verification for WooCommerce < 3.2.6.
• Fixed in: version 3.2.6.
• Action now:
  • Update to version 3.2.6: wp plugin update customer-email-verification-for-woocommerce.

Emerging Ransomware & Supply Chain

PicMo Group Ransomware — A new ransomware group has been identified targeting underground forums and infrastructure providers [8].

• Action now:
  • Review egress controls and implement microsegmentation to limit lateral movement [10].
  • Ensure offline backups are verified and immutable.

Watering Hole Attack Trends — New intelligence suggests an uptick in attackers compromising legitimate infrastructure to deliver malware to specific visitor groups [7].

• Action now:
  • Audit site integrity using file integrity monitoring (FIM) to detect unauthorized JS injections or redirects.