Skip to content
OpenAdvisories

Vendor

Plesk

4 known vulnerabilities.

Products

Plesk 2 Plesk Installer 1 Obsidian 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.8
    CVE-2025-49618

    In Plesk Obsidian 18.0.69, unauthenticated requests to /login_up.php can reveal an AWS accessKeyId, secretAccessKey, re…

    Plesk Obsidian
  • Medium 6.3
    CVE-2023-4931

    Uncontrolled search path element vulnerability in Plesk

    Uncontrolled search path element vulnerability in Plesk Installer affects version 3.27.0.0. A local attacker could execute arbitrary code by injecting DLL files into the same folder where the application is installed, resulting in DLL hijacking in edputil.dll…

    Plesk Plesk Installer