Skip to content
OpenAdvisories

Vendor

Plesk

4 known vulnerabilities.

Products

Plesk 2 Plesk Installer 1 Obsidian 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.8
    CVE-2025-66431

    WebPros Plesk before 18.0.73.5 and 18.0.74 before 18.0.74.2 on Linux allows remote authenticated users to execute arbit…

    Plesk Plesk
  • High 8.8
    CVE-2023-0829

    Cross-Site Scripting (XSS) vulnerability in Plesk

    Plesk 17.0 through 18.0.31 version, is vulnerable to a Cross-Site Scripting. A malicious subscription owner (either a customer or an additional user), can fully compromise the server if an administrator visits a certain page in Plesk related to the malicious …

    Plesk Plesk