We Went From 21 Days of Backups to Six Months. At No Extra Cost

Rows of labeled archive boxes representing backups retained over successive six-month periods.

Backups are one of those things nobody thinks about until the day they matter more than anything else. A bad plugin update, a compromised password, a database migration that went sideways, or a client calling months later asking whether that page they deleted can come back. When that day arrives, only one question matters: how far back can we go?

Until recently, our answer was about 21 days. Today it’s roughly six months.

We’ve expanded backup retention across both our Turbo and Plaid shared hosting platforms. There’s no price increase, no add-on to purchase, and no ticket to open. If you’re on one of these plans, the longer retention is already running.

Continue reading “We Went From 21 Days of Backups to Six Months. At No Extra Cost”

cPanel & WHM Security Update: CVE-2026-29201, 29202, and 29203 Patched

cPanel Logo

cPanel released a coordinated security update today, May 8, 2026, addressing three separate vulnerabilities in cPanel & WHM. We received advance notice of the patch yesterday evening, monitored for its release at noon EDT, and applied it across our fleet as soon as it became available.

This post summarizes what cPanel disclosed, when the patch actually landed, and what we did about it.

What cPanel Disclosed in Advance

On the evening of May 7, cPanel sent affected partners an early-warning email letting us know a security update was coming the following day at 12:00 PM EDT. The advance notice covered three CVEs being patched together: CVE-2026-29201, CVE-2026-29202, and CVE-2026-29203.

The notice specified the minimum patched build for every supported tier from 11.86 through 11.136, including the WP Squared (11.136 WP2) line. cPanel recommended performing a manual update via /scripts/upcp once the patch was made available, rather than waiting for the standard automatic update window.

Full technical details were embargoed until the patch itself was released.

Continue reading “cPanel & WHM Security Update: CVE-2026-29201, 29202, and 29203 Patched”