Plesk

Records14All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Plesk records in CISA KEV

No Plesk vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

5 records in Plesk · all components

TI-2021-20370 CVE-2021-45007 · GHSA-3hhp-w7c3-gjq2

MEDIUM 62

Plesk 18.0.37 is affected by a Cross Site Request Forgery (CSRF) vulnerability that allows an attacker to insert data on the user and admin panel.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00731 Published 2022-02-20 No fix listed CWE-352

TI-2025-40863 CVE-2025-66430 · GHSA-r6m5-94xr-hjvj

MEDIUM 48

Plesk 18.0 has Incorrect Access Control.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00551 Published 2025-12-12 No fix listed CWE-284

TI-2021-20371 CVE-2021-45008 · GHSA-84hm-26hq-gff5

MEDIUM 44

Plesk CMS 18.0.37 is affected by an insecure permissions vulnerability that allows privilege Escalation from user to admin rights.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01959 Published 2022-02-21 No fix listed CWE-281

TI-2023-00785 CVE-2023-0829 · GHSA-f96r-wmpc-994r

MEDIUM 42

Plesk 17.0 through 18.0.31 version, is vulnerable to a Cross-Site Scripting.

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.00662 Published 2023-09-20 No fix listed CWE-79

TI-2023-04541 CVE-2023-4931 · GHSA-j299-xg3x-fqhp

LOW 34

Uncontrolled search path element vulnerability in Plesk Installer affects version 3.27.0.0.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00249 Published 2023-11-27 No fix listed CWE-427