Our takeWebPros advisory AV26-961 confirms multiple vulnerabilities in Plesk 18.0.34-18.0.81.0, its RESTful API extension 2.4.2-2.4.6, Site Import ≤1.12.1, and WP Toolkit for cPanel. Patch all affected versions immediately.Cyber Resilience desk
Sources (1)
- cccs · cccs
What this means for you — Security leader:Apply the patches in WebPros AV26-961 immediately for Plesk 18.0.34–18.0.80.7, 18.0.81.0, the RESTful API extension (2.4.2–2.4.6), Site Import (≤1.12.1), and WP Toolkit for cPanel (all versions listed).
What this means for you — Lean IT orgs:If you run Plesk yourself, update it and the listed extensions right away using the versions in advisory AV26-961.
What this means for you — MSP:Audit all managed Plesk servers and cPanel WP Toolkit instances for the affected versions and push the AV26-961 patches across client estates.
What this means for you — Researcher:Review the full technical details once WebPros publishes the CVE assignments and patch diff for these Plesk and extension flaws.