Affected Product
Plesk
20 advisories
Critical
2026-11-06
Vulnerability CVE-2026-107246 in Plesk’s Site Import extension
Plesk
High
2026-10-28
Security: phpMyAdmin 5.2.3 WebAuthn Two-Factor Authentication Bypass
Plesk
High
2026-10-20
Vulnerability CVE-2026-113386: IMAP command injection in Roundcube in Plesk
Plesk
High
2026-10-13
Vulnerability CVE-2026-107663 in WP Toolkit on cPanel & WHM
cPanel
Plesk
Critical
2026-09-23 00:00:00
Plesk CVE-2026-68492
Plesk
AlmaLinux 8
AlmaLinux 9
Critical
2026-09-23 00:00:00
Plesk CVE-2026-87898: OS Command Injection
Plesk
AlmaLinux 8
AlmaLinux 9
High
2026-09-17 00:00:00
Acronis Backup for cPanel & Plesk CVE-2026-87886: Privilege Escalation
cPanel
DirectAdmin
Plesk
AlmaLinux 8
AlmaLinux 9
Critical
2026-09-14 00:00:00
Plesk CVE-2026-68489: Code Injection
Plesk
AlmaLinux 8
AlmaLinux 9
Critical
2026-09-10 00:00:00
Plesk CVE-2026-68487: Path Traversal
Plesk
Critical
2026-09-10 00:00:00
Plesk CVE-2026-68488: Privilege Escalation
Plesk
Critical
2026-09-08
WP Toolkit CVE-2026-47365
cPanel
Plesk
Critical
2026-09-04 00:00:00
Plesk CVE-2026-67397: Path Traversal
Plesk
AlmaLinux 8
AlmaLinux 9