Hub
cPanel and WHM Guides, Scripts and Tools
Fixes, migrations, email, SSL, backups and performance for cPanel and WHM servers, with scripts and free checks in one place.
Short answer: This is the srvScripts hub for cPanel and WHM server admins: guides for Exim and email delivery, AutoSSL and certificates, backups and restores, migrations, PHP and performance, and security with CSF and Imunify360, plus scripts and free online checks. Pick the section that matches the job.
Each page says how it was tested; many were run on our cPanel lab server (cPanel & WHM 11.138 on AlmaLinux 9.8), the rest were checked against the official documentation.
Table of Contents
Email, Exim and deliverability
- BIMI VMC vs CMC: Requirements, DMARC and Which Inboxes Show Logos
- cPanel Disk Full: Safe Cleanup of Logs, Backups and Mail
- cPanel Exim Queue Stuck: Flush, Thaw and Delete Frozen Mail
- Dovecot 2.4 Mail Login Failed: Fix Broken Logins on cPanel
- Dovecot Sieve Filters Roundcube: Mail Rules on cPanel
- Emails Going to Junk in Outlook and Hotmail: Sender-Side Fix
- Exim 4.100 Security Fixes: Critical 2026 Changes for Hosting
- Exim Outbound Mail Limits WHM: Stop Spam Runs Fast
- Find a DKIM Selector: Headers, Panel Defaults and Key Checks
- Free MxToolbox Alternatives: Email and DNS Tools Compared (2026)
- Gmail and Yahoo Bulk Sender Requirements: 2026 Host Checklist
- JetBackup 5 Restore in WHM: Accounts, Files, Databases, Email
- Mail server IP blacklisted: delisting runbook
- MailBaby cPanel Exim Setup: Reliable Router, SRS and DKIM
- MailBaby SRS and Strict Forwarding Errors: Reliable Forwarders
- Migrate cPanel Email to Google Workspace: 2026 Reliable IMAP Migration
- One-Click Unsubscribe (RFC 8058) for Exim, Postfix, WordPress
- Outgoing Spam cPanel: Find the Source and Stop It
- Spamhaus 550 5.7.1 Blocked: Fix SBL, XBL, CSS, PBL and DBL
- SPF Too Many DNS Lookups: Fix PermError and the 10-Lookup Limit
- SPF, DKIM and DMARC in cPanel DNS: Setup and Checks
- Split a 2048-bit DKIM TXT Record Over 255 Characters
- Warm Up New Mail Server IP Without Spam Problems
- Whitelist MailBaby cPanel: Stop Greylisting and CSF Blocks
SSL and certificates
- 200-Day SSL Certificates and DCV Reuse: What It Means for AutoSSL
- 47-Day SSL Certificate Lifetime: Critical Automation for Hosts
- AutoSSL Failed cPanel: Fix DCV, CAA and CDN Problems
- cPanel AutoSSL Provider: Sectigo or Let’s Encrypt, Best Choice
- cPanel Hostname SSL: Let’s Encrypt AutoSSL Fix in WHM
- cPanel SSL/TLS Interface (v136+): Install and Renew
- ERR_CERT_COMMON_NAME_INVALID on cPanel: Wrong Certificate Served
- Let’s Encrypt Changes 2025 to 2028: What Hosting Admins Must Do
- What changed in cPanel 136: unified SSL, Ruby removed, Ubuntu 22.04 dropped, MariaDB 11.8
Backups, restores and migrations
- cPanel restorepkg and pkgacct: Backup and Restore from CLI
- Imunify360 Without CSF: Remove CSF and Use Imunify as the Firewall
- JetBackup 4 to 5 Migration: The 5.2.11 Stepping Stone
- Migrate cPanel accounts to a new server without customers noticing
- Migrate cPanel to DirectAdmin: Safe Account Transfer
- Migrate DirectAdmin to cPanel: Complete 9-Step Migration Playbook
- Migrate Plesk to cPanel (and cPanel to Plesk): Tools and Limits
- Migrating a cPanel server to the cPanel CSF fork and verifying auto-updates
- MySQL 8.0 End of Life: Safe Move to 8.4 or MariaDB
- Restic Backup for cPanel and DirectAdmin: Files, Databases, Retention
- Rocky Linux cPanel to AlmaLinux 8/9: Safe Migration Before Updates Stop
- Transferring accounts between servers with the WHM Transfer Tool
- Upgrade MariaDB WHM Safely: Backups and mariadb-upgrade
- WHM Backups S3: Reliable Remote Backups and Test Restores
PHP, MySQL and performance
- “Cannot Manage PHP Versions When CageFS Is Disabled”: PHP Selector Fix
- cPanel Apache Log Retention (v136+): Stop Disk Bloat
- cPanel Inode Usage: Find What Uses Inodes and Fix It
- cPanel PHP-FPM Tuning: “Server Reached pm.max_children” Fix
- Disk full on a production server: recovery runbook
- EasyApache 4 PHP Versions 8.2 to 8.5: Install and Switch
- Find cPanel, DirectAdmin and MySQL Passwords from the CLI (and One-Time Login Links)
- High Load cPanel Server: Find the Culprit Fast (5 Tools)
- InnoDB Tuning MariaDB 11/12: Shared Hosting Settings
- Install Imagick EA-PHP on AlmaLinux 8/9/10: cPanel Setup
- LiteSpeed cPanel plugin CVE-2026-48172: the symlink-to-root flaw and how to verify you’re patched
- LiteSpeed vs OpenLiteSpeed for Hosting Servers: Which to Pick
- MariaDB Not Starting After Upgrade: 5 Recovery Fixes
- MultiPHP Manager Bulk PHP Version Changes (cPanel 136+)
- MySQL ERROR 1040 Too Many Connections: Fixes for cPanel
- MySQL/MariaDB won’t start: crash recovery runbook
- Retire PHP 8.1 cPanel Sites Safely: Audit, Test and TuxCare ELS
- Stuck lsphp Processes on cPanel LiteSpeed: Diagnose and Kill Safely
- Upgrade MySQL 8 to MariaDB 11.8 in WHM Safely, Without Data Loss
Security and firewall
- “cPanel license is invalid”: troubleshooting manage2, IP changes and firewalls
- Clean a Hacked WordPress Site on cPanel: Step-by-Step
- CrowdSec vs Imunify360 vs BitNinja: choosing a post-CSF security stack for shared hosting
- CSF Commands Cheat Sheet: Allow, Deny, Ports and Tempbans
- CSF CVE-2026-65638, 65639, 67402: Critical Patch Guide
- CSF Fork 2026: Which Reliable Replacement After ConfigServer?
- cxs Replacement: Free Malware Scanning with LMD and ClamAV
- Harden Shared cPanel Server: Secure CageFS and ModSecurity Setup
- Imunify360 False Positives: Find the Rule ID and Fix It
- Imunify360 Force Update and Rollback: Safe Staged Rollouts
- Imunify360 Missing from WHM: 4 Fixes
- Imunify360 Under Attack Mode 2026: WAF and L7 Rate Limit
- Imunify360 Whitelist IP and Countries from the CLI: Commands
- Server hacked: incident response runbook for Linux and cPanel
- Using WP Toolkit Security Risk scores, Smart Update and Vulnerable Components
- WordPress cURL Error 28: Failed to Connect Fixed (Imunify360 and CSF)
DNS and domains
- Cloudflare cPanel DNS Proxy: Real Visitor IPs
- Cloudflare Error 521, 522 and 525 on cPanel: Fixes
- cPanel Temporary Domain: Free *.cpanel.site Setup
- Rename Addon Domain cPanel 138+: In-Place Rename
- What changed in cPanel 138: Meridian, Ask AI, Nova, MCP and domain rename
More guides
- “508 Resource Limit Is Reached”: Find and Fix the Limit
- Best VPS for cPanel and DirectAdmin in 2026: What to Check
- Choosing a cPanel update tier in 2026: LTS 134, RELEASE 138 or STABLE 110 (EOL December 2026)
- CloudLinux 10 cPanel: CageFS and LVE Limits, Upgrade Notes
- CloudLinux LVE Limits Explained: SPEED, PMEM, EP, NPROC, IO
- cPanel CVE Build Numbers 2026: Is Your Server Safe?
- cPanel ELevate AlmaLinux 8 to 9 to 10: Safe Upgrade Steps
- cPanel MCP AI Agent Access (v138): Secure Setup and Audit
- cPanel Meridian, Ask AI and Nova: Enable or Disable
- cPanel Node.js Toolkit Deploy: Run an App
- cPanel Pricing 2026: Licensing Explained Without Mistakes
- cPanel Quotas Unlimited: fixquotas Repair
- cPanel Root Escalation Incident Response: Critical First 24 Hours
- cPanel upcp Failed: Fix Upgrade Blocked Problems
- GoAccess cPanel: AWStats and Webalizer Replacement Before 140
- Install cPanel AlmaLinux 10: 2026 Checklist
- KernelCare Setup on cPanel and DirectAdmin: Reliable Patching
- Lock Down WHM: 2FA, cPHulk and API Tokens for Secure Access
- MTA-STS on cPanel and DirectAdmin: Policy File and TLS-RPT
- Outlook 550 5.7.515: Fix the High-Volume Sender Rejection
- Roundcube Database Error and Login Loops: 4 cPanel Fixes
- Ubuntu vs AlmaLinux cPanel 2026: Best OS for a New Server
- WordPress CVE-2026-64638 Patch: Find and Update Every Vulnerable Site
- WP Toolkit CVE-2026-87900: what is affected and how to patch to 6.11.3
Scripts
- Access Log Top IPs and Bots Report
- AutoSSL DCV Failures Report
- Backup Verify Script
- cPanel Account Inventory
- cPanel Disk Usage Report
- cPanel Migration Preflight Check
- cPanel PHP Version Audit
- Disk and Inode Alert
- Exim Mail Queue Report
- Inode Usage Report: Top Directories by File Count per Account
- MariaDB Slow Query Log Summary
- Multi-Server Health Check over SSH
- MySQL Health Snapshot Script: Free 10-Second MariaDB Check
- PHP-FPM Slow Log Analyzer
- Redirect Chain Checker
- Restic Backup Script for Offsite Backups
- Server Inventory Report
- Server Security Audit Script
- SSL Expiry Check Script: Free Network Test for Web and Mail
- WordPress Version Audit: Find Every WordPress Site and Its Version
Free tools
- .htaccess Redirect Generator
- BIMI Checker
- CAA and TLSA Checker: Free CAA Record and DANE Test
- Certificate Key Matcher: Free Safe Cert and Key Check
- chmod Calculator
- Cron Expression Helper
- CSR Decoder
- DKIM Checker
- DKIM Key Generator: 2048-bit Key Pair and DNS Record
- DMARC Checker
- DMARC Record Generator
- DMARC Report Analyzer
- DNS TXT Record Splitter: Split Long Values Into 255-Byte Strings
- Domain Health Checker: Free Score for DNS, SSL, Email and Headers
- Email Domain Health Check
- Email Header Analyzer
- IP Blacklist Check: Bulk IPs, CIDR Ranges and Domains (33 Lists)
- MTA-STS Checker
- MX Lookup
- Open Port Checker: Test TCP Ports on Any Public Server
- PHP-FPM Calculator: pm.max_children and Spare Servers
- Secure Password Generator
- SMTP Bounce Explainer: What Your Bounce Message Means
- SMTP Test: Free STARTTLS, Certificate and Banner Check
- SPF Lookup Counter: Check the 10 DNS Lookup Limit
- SPF Record Checker
- SPF Record Generator
- SSL Certificate Checker
- SSL Certificate Decoder
- Uptime SSL Blacklist Monitor: Free Email Alerts