Vulnerabilities

TI-2025-40863 CVE-2025-66430 · GHSA-r6m5-94xr-hjvj

Plesk 18.0 has Incorrect Access Control.

MEDIUM 48

Plesk 18.0 has Incorrect Access Control.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00551 Published 2025-12-12 No fix listed CWE-284

TI-2023-04541 CVE-2023-4931 · GHSA-j299-xg3x-fqhp

LOW 34

Uncontrolled search path element vulnerability in Plesk Installer affects version 3.27.0.0.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00249 Published 2023-11-27 No fix listed CWE-427

TI-2023-00785 CVE-2023-0829 · GHSA-f96r-wmpc-994r

MEDIUM 42

Plesk 17.0 through 18.0.31 version, is vulnerable to a Cross-Site Scripting.

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.00662 Published 2023-09-20 No fix listed CWE-79

TI-2021-20371 CVE-2021-45008 · GHSA-84hm-26hq-gff5

MEDIUM 44

Plesk CMS 18.0.37 is affected by an insecure permissions vulnerability that allows privilege Escalation from user to admin rights.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01959 Published 2022-02-21 No fix listed CWE-281

TI-2021-20370 CVE-2021-45007 · GHSA-3hhp-w7c3-gjq2

MEDIUM 62

Plesk 18.0.37 is affected by a Cross Site Request Forgery (CSRF) vulnerability that allows an attacker to insert data on the user and admin panel.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00731 Published 2022-02-20 No fix listed CWE-352