• If you are still using CentOS 7.9, it's time to convert to Alma 8 with the free centos2alma tool by Plesk or Plesk Migrator. Please let us know your experiences or concerns in this thread:
    CentOS2Alma discussion
  • Inviting everyone to the UX test of a new security feature in the WP Toolkit
    For WordPress site owners, threats posed by hackers are ever-present. Because of this, we are developing a new security feature for the WP Toolkit. If the topic of WordPress website security is relevant to you, we would be grateful if you could share your experience and help us test the usability of this feature. We invite you to join us for a 1-hour online session via Google Meet. Select a convenient meeting time with our friendly UX staff here.

Security risk in updating Plesk

Token

New Pleskian
After updating Plesk in 'Database Hosting Settings' always is choosed 'Remoteverbindungen von beliebigem Host zulassen' ('Allow remote access from any host'), but I've choosed weeks ago 'Allow only access from local host'!!! Often after an update this settings are edited from Plesk to the default!! Thats a big security risk.
 
I can't reproduce this issue on my test Plesk 12.5 server. I set it to 'Allow only access from local host' and installed latest updates with

# plesk installer --select-release-current --reinstall-patch --upgrade-installed-components

The setting remained the same.
How I can reproduce this issue?
 
Back
Top