• Debian 11 has reached its end-of-life (vendor EOL date - August 31, 2026). Plesk Obsidian 18.0.81 is the last release to support it.
    If you are running Plesk Obsidian on Debian 11, we recommend you upgrade those servers to Debian 12 using our dist-upgrade tool.
  • We plan to deprecate and remove the support for XML RPC protocol versions earlier than 1.6.9.1 in Plesk Obsidian 18.0.82. We strongly recommend that you update all existing integrations using earlier versions of the XML RPC protocol to comply with the version 1.6.9.1 specification.

Intruder logged into control panel as admin

F

Foo

Guest
I have no idea how, but an intruder logged into my Plesk control panel as an admin last night, created a customer, did some minor looking around, deleted the customer, then took off.

Any idea how someone one could break in like this?

I'm the only person with an admin account and the password is secure. All control panel access happens over HTTPS.

For what its worth, I upgraded from 9.5.3 to 10.0.1 a few days ago. Are there any known security patches that I'm missing? I saw all the posts about problems with 10.1.X so I've been waiting on upgrading.
 
You must log in or register to reply here.

Similar threads

T
Question Inquiry on Restricting Direct Customer and Reseller Account Creation in Plesk Admin Panel
Replies
3
Views
2K
Thomas Oryon
T
S
WP Toolkit One-Time Login - Bypassing Wordfence 2FA and No Option to Select WP Admin
Replies
2
Views
2K
Sebahat.hadzhi
Sebahat.hadzhi
J
Input My 80s Collection - Spyware?
Replies
8
Views
3K
HHawk
HHawk
T
Resolved Auto-update of vulnerable plugins ("security updates are autoinstalled") never applies: daily task only reschedules (WP Toolkit 6.11 / cPanel)
Replies
4
Views
4K
Sebahat.hadzhi
Sebahat.hadzhi
R
Question WebMail can't reactivate
Replies
1
Views
3K
Kaspar
K
Back
Top