Security and maintenance updates We released updated packages for EasyApache 4. This security release fixes CVE-2026-91765 and CVE-2025-14181 in the SOAP extension of ea-php74, ea-php80, and ea-php81. These packages now report PHP versions…
Improved security, multi-domain changes, and translated messages The AI Assistant no longer asks for your AI App Builder API token in the chat, and a password that you type into a request is no longer kept in the stored conversation after …
Fixed web applications behind standalone NGINX A web application is now reachable over HTTP and HTTPS when NGINX runs in standalone mode, instead of returning a 403 Forbidden error. Adding or removing a database on a running web applicatio…
Nova’s MCP tools move to a new package Nova’s tool endpoint page and its MCP tools for the WordPress sites of cPanel accounts now come from the new cpanel-nova-mcp package, which the Nova plugin requires. The new Nova::is_wordp…
Added a Help menu, AI Assistant feedback, and paged tables A new Help menu opens your hosting provider’s documentation and support links, and Meridian is ready for hosting provider branding that your provider will set up in WHM in a …
Server Check cleanup Server Check no longer runs the obsolete cPAddons notification checks. For a full list of changes, read the ConfigServer Security & Firewall (CSF) change log.
Translated database messages Database error and warning messages in web applications now use reviewed wording, and they are translated into all supported languages. For more information on AI App Hosting plugin releases, read our AI App Ho…
Package files kept after updates Sitejet Builder now keeps its Sitejet Builder Only package type and package extension files after an update. Nightly cPanel maintenance no longer reinstalls Sitejet Builder and the plugins that depend on it…
Security and maintenance updates We released updated packages for EasyApache 4. This security release updates ea-brotli to 1.0.10 to fix CVE-2026-111497. It updates ea-valkey72 to 7.2.15 to fix GHSA-f4q9-j22m-xqq9. It also updates ea-nginx…
Web applications now recover from common faults The system now checks web applications every five minutes. It repairs a proxy that points at the wrong port, including after an application is restored from a backup, and emails the account w…
Nova for WordPress now requires WP Toolkit Nova for WordPress no longer appears in Feature Manager or when you add a package on servers without WP Toolkit. The plugin now installs WP Toolkit in the background and offers Nova for WordPress …
Nightly update fix The nightly cPanel update no longer reinstalls Sitejet Builder. Before this change, the reinstall removed the plugins that depend on Sitejet Builder, such as the Meridian theme. For a full list of changes, read the Sitej…
Security and maintenance updates We released updated packages for EasyApache 4. This security release updates ea-nodejs22 to 22.23.4, which fixes seven vulnerabilities, including CVE-2026-111497, CVE-2026-105482 and CVE-2026-106069 (high).…
Security and maintenance updates We released updated packages for EasyApache 4. This security release fixes two critical PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619) in ea-php74 through ea-php85. It also patches ea-libcurl for…
Fixed accented and non-Latin text The reply that the AI Assistant sends after you approve a change now sends accented characters, such as é and ü, as valid UTF-8. Text from earlier in a conversation no longer comes back garbled. A change …
Added the Sitejet Builder Only experience Sitejet Builder now has an experience that takes users straight into Sitejet Builder, with no classic cPanel interface. Only accounts whose package has the standalone-sitejet package extension get …
Package type fix Sitejet Builder now makes sure that the package types directory exists before it adds the Sitejet Builder Only package type. For a full list of changes, read the Sitejet Builder change log.
Added the WP Toolkit Site Import dependency for Nova for WordPress The Nova for WordPress feature now depends on the WP Toolkit Site Import feature. A feature list can no longer enable Nova for WordPress without it. When you upgrade, the p…
Renamed the Nova package type The Nova package type is now named Nova Experience Package. Its description in the package type list is also updated. For more information on Nova plugin releases, read our Nova Release Notes documentation.
Set up Nova on servers that you license later The Nova plugin now runs its install lifecycle on every cPanel update while the package is installed and licensed. A server that you license after you install Nova is set up without manual step…