Product

Plesk

2 briefs RSS

Security Vulnerabilities in Plesk Management Interface and Extensions

WebPros has released security updates for Plesk and its Migrator and Site Import extensions to address critical vulnerabilities CVE-2026-65642 and CVE-2026-65647.

Plesk +2 vulnerability patch-management web-hosting

2c 3w ago

high advisory

Blind SQL Injection Vulnerability in Plesk XML-RPC API

1 rule 1 TTP 1 CVE

A blind SQL injection vulnerability, tracked as CVE-2026-58046, affects the Plesk XML-RPC API, potentially allowing unauthenticated attackers to execute arbitrary database queries.

Plesk web-application sql-injection vulnerability

1r 1t 1c Jul 30, 2026