CloudPanel vulnerabilities

Products

• CLP Varnish Cache 1
• Community Edition 1

Latest CloudPanel CVEs

Newest publication first

1. CVE-2026-24525 WordPress CLP Varnish Cache plugin <= 1.0.2 - Broken Access Control vulnerability

   Published 2026-01-23

   Medium·CVSS 5.3

   Missing Authorization vulnerability in CloudPanel CLP Varnish Cache clp-varnish-cache allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CLP Varnish Cache: from n/a through <= 1.0.2.

2. CVE-2025-15241 CloudPanel Community Edition HTTP Header users redirect

   Published 2025-12-30

   Medium·CVSS 5.1

   A security vulnerability has been detected in CloudPanel Community Edition up to 2.5.1. The affected element is an unknown function of the file /admin/users of the component HTTP Header Handler. Such manipulation of the argument Referer leads to open redirect. It is possible to l...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.