Plesk vulnerabilities
4 published CVEs name Plesk among the affected products.
- 4Published CVEs4 of them scored
- 1Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2025-66431
WebPros Plesk before 18.0.73.5 and 18.0.74 before 18.0.74.2 on Linux allows remote authenticated users to execute arbitrary code as root via domain creation.…
Plesk · Plesk
High7.8 - CVE-2025-49618
In Plesk Obsidian 18.0.69, unauthenticated requests to /login_up.php can reveal an AWS accessKeyId, secretAccessKey, region, and endpoint.
Plesk · Obsidian
Medium5.8 - CVE-2023-4931
Uncontrolled search path element vulnerability in Plesk
Plesk · Plesk Installer
Medium6.3 - CVE-2023-0829
Cross-Site Scripting (XSS) vulnerability in Plesk
Plesk · Plesk
High8.8