Advisories · Technology
WebPros Plesk.
Every CVE that names WebPros Plesk among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.7 High
Untrusted search path in WebPros Plesk and others
- WebPros Plesk
- WebPros Plesk extension "Plesk RESTful API"
- CWE-426
- CVSS 9.9 CriticalCritical · CVSS 9+
Path traversal in WebPros Plesk
- WebPros Plesk
- Path traversal
- CVSS 9.9 CriticalCritical · CVSS 9+
Time-of-check time-of-use race condition in WebPros Plesk
- WebPros Plesk
- Race condition
- CVSS 8.5 High
Path traversal in WebPros Plesk
- WebPros Plesk
- Path traversal
- CVSS 9.0 CriticalCritical · CVSS 9+
OS command injection in WebPros Plesk
- WebPros Plesk
- Command injection
- CVSS 9.9 CriticalCritical · CVSS 9+
Injection in WebPros Plesk
- WebPros Plesk
- Other injection
- CVSS 8.6 High
Insecure direct object reference in WebPros Plesk
- WebPros Plesk
- Broken access control
- CVSS 9.3 CriticalCritical · CVSS 9+
WebPros Plesk: Incorrect database cloning process in Plesk from 18.0.52 before 18.0.79.6 and 18.0.80.2…
- WebPros Plesk
- Privilege escalation
- CVSS 9.9 CriticalCritical · CVSS 9+
Improper privilege management in WebPros Plesk
- WebPros Plesk
- Privilege escalation
- CVSS 7.7 High
SQL injection in WebPros Plesk
- WebPros Plesk
- SQL injection
- CVSS 9.9 CriticalCritical · CVSS 9+
SQL injection in WebPros Plesk
- WebPros Plesk
- SQL injection
- CVSS 9.9 CriticalCritical · CVSS 9+
Insufficiently protected credentials in Webpros Plesk
- Webpros Plesk
- Hard-coded credentials
- CVSS 9.9 CriticalCritical · CVSS 9+
Code injection in WebPros Plesk
- WebPros Plesk
- Code injection
- CVSS 9.9 CriticalCritical · CVSS 9+
XPath injection in WebPros Plesk
- WebPros Plesk
- Other injection