• Halloween is coming! To celebrate the occasion, we dusted off a couple of old skins, and even created a brand new one (Pixel).
    To get into the festive spirit, install the Skins extension.
  • The new Python extension is now available. It allows customers to deploy and manage WSGI-based Python applications on their websites directly from Plesk.
  • The Plesk Mobile apps for iOS and Android and the Plesk Mobile Center extension have been deprecated, and are no longer available for new installations. In Plesk Obsidian 18.0.84, the Plesk Mobile Center extension will be removed from servers during the upgrade, and the Plesk Mobile apps will lose their server management features.
  • The Social Login extension has been deprecated and will be removed in Plesk Obsidian 18.0.84. After that, it will no longer be possible to log in to Plesk with a Google, Facebook, GitHub account, or with a passkey. Plesk usernames and passwords, as well as logging in with a WebPros Account, are not affected.

security

  1. M

    Input I built a plesk-server-report for hourly analysis, maybe someone finds it useful

    After php2shell, I built a server report that runs every hour to monitor whats going on. I am not sure yet if this really detects malicious code on my server (I haven't been hacked) but I think it should. At least, it should recognize hacked wordpress installs or misused email accounts. Maybe...
  2. R

    Issue Three more CVEs for nginx just hit - one rated as critical with DoS and RCE possible

    Just a quick note that three more CVEs for nginx have been posted as of yesterday the 15th, with one rated as a major severity with a CVSS v4.0 score of 9.2 (Critical) and a CVSS v3.1 base score of 8.1 (High) Reference: https://cybersecuritynews.com/f5-patches-multiple-nginx-vulnerabilities/...
  3. T

    Issue Bug: Plesk Nginx proxy stripping performance headers - CPU spikes on all woocommerce downloads

    Bug overview: We have discovered that Plesk is stripping off the X-Acccel and Xsendfile headers added by woocommerce for faster secure downloadable products. This means the woocommerce_uploads folder cannot be restricted using the recommended Nginx settings - Meaning downloads can be stolen...
  4. M

    Resolved Plesk Email Security: Unable to disable greylisting server-wide, per-mailname, per-domain

    Hello community, I am trying to disable graylisting for various domainnames or mailnames. With the cli tool I was able to alter the status of the greylisting, but it appears to me that using the Plesk Email Security extension, these statuses dont really matter. The mail appliance keeps...
  5. T

    Question Security? Don't just delete this topic...

    I did have a fully secure and this part was at green, what should now do? and how do I get mail working from a fresh install? Once again I did have it fully secure and mail working. Advisor The server could benefit from a tune-up. Your server rating is medium. Rating:3440
  6. T

    Issue WordPress Toolkit Reporting Low Risk Vulnerabilities Again

    HI Guys Now the Ignore Low-Risk Vulnerabilities feature has been removed we have a big red dot on the security tab again which is disturbing and massively unhelpful. The red dot on the security tab is a very useful indicator of actual security problems but not when it is showing 0.1 rated...
  7. J.Wick

    Issue CVE-2025-68121 - Grafana 10.4.19_security_01-1

    During session resumption in crypto/TLS, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed. This may happen when a user calls Config. Clone and mutates the...
  8. A

    Question Allow mail managers to manage quarantined messages in Plesk Email Security

    We recently started using the paid version of Plesk Email Security, and we were expecting users with the Mail Manager role to be able to manage quarantined messages. This doesn't seem the case, and also there's no specific permission for this that we can give to that role. Isn't this possible...
Back
Top