easy hosting control panel vulnerabilities and fixes

Recent CVEs affecting easy hosting control panel, with upgrade or downgrade steps. 6 tracked.

Also searched as: easyhostingcontrolpanel.

easy hosting control panel has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-08-22. Highest priority: CVE-2025-50926 (score 37/100).

CVE-2025-50928 MEDIUM 4.8 DOWNGRADE Easy Hosting Control Panel EHCP v20.04.1.b was discovered to contain a SQL injection vulnerability via the id
CVE-2025-50927 MEDIUM 6.3 DOWNGRADE A reflected cross-site scripting (XSS) vulnerability in the List All FTP User Function in EHCP v20.04.1.b allo
CVE-2025-50926 MEDIUM 6.5 DOWNGRADE Easy Hosting Control Panel EHCP v20.04.1.b was discovered to contain a SQL injection vulnerability via the id
CVE-2025-50860 MEDIUM 5.4 DOWNGRADE SQL Injection in the listdomains function in Easy Hosting Control Panel (EHCP) 20.04.1.b allows authenticated
CVE-2025-50859 MEDIUM 6.1 DOWNGRADE Reflected Cross-Site Scripting in the Change Template function in Easy Hosting Control Panel (EHCP) 20.04.1.b
CVE-2025-50858 MEDIUM 6.1 DOWNGRADE Reflected Cross-Site Scripting in the List MySQL Databases function in Easy Hosting Control Panel (EHCP) 20.04

FAQ

How do I fix easy hosting control panel vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is easy hosting control panel being exploited right now?

None of the tracked easy hosting control panel CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which easy hosting control panel CVE should I patch first?

CVE-2025-50926 currently ranks highest (37/100): Easy Hosting Control Panel EHCP v20.04.1.b was discovered to contain a SQL injection vulnerability via the id .

RSS feed for easy hosting control panel · ← Back to latest CVEs