• Please be aware: Kaspersky Anti-Virus has been deprecated
    With the upgrade to Plesk Obsidian 18.0.64, "Kaspersky Anti-Virus for Servers" will be automatically removed from the servers it is installed on. We recommend that you migrate to Sophos Anti-Virus for Servers.
  • The Horde webmail has been deprecated. Its complete removal is scheduled for April 2025. For details and recommended actions, see the Feature and Deprecation Plan.
  • We’re working on enhancing the Monitoring feature in Plesk, and we could really use your expertise! If you’re open to sharing your experiences with server and website monitoring or providing feedback, we’d love to have a one-hour online meeting with you.

Issue WordPress Toolkit reporting old vulnerabilities

nmdpa3

Basic Pleskian
Server operating system version
Ubuntu 22.04
Plesk version and microupdate number
18.0.56 #4
WP Toolkit version - 6.2.11-7659, from a WP Toolkit domain Security Status screen, under the WordPress Vulnerabilities Tab, toolkit continues to reference the following vulnerability:

WordPress <= 6.2 - Unauth. Blind SSRF vulnerability

This is occurring for sites that are on the latest version of WordPress, 6.4, or any version greater than the WP version shown in that vulnerability message.
 

Attachments

  • Screenshot 2023-11-08 at 11.09.06 AM.png
    Screenshot 2023-11-08 at 11.09.06 AM.png
    48.4 KB · Views: 20
  • Screenshot 2023-11-08 at 11.09.45 AM.png
    Screenshot 2023-11-08 at 11.09.45 AM.png
    61.8 KB · Views: 18
Hey @nmdpa3, thanks for letting us know. Seems like this might be an oversight on the vulnerability vendor side, I'll ask them if they can address this.
 
Back
Top