• Debian 11 is approaching its end-of-life (vendor EOL date - August 31, 2026). Plesk Obsidian 18.0.80 will be the last release to support it.
    If you are running Plesk Obsidian on Debian 11, we recommend you upgrade those servers to Debian 12 using our dist-upgrade tool.
  • We plan to deprecate and remove the support for XML RPC protocol versions earlier than 1.6.9.1 in Plesk Obsidian 18.0.82. We strongly recommend that you update all existing integrations using earlier versions of the XML RPC protocol to comply with the version 1.6.9.1 specification.

Issue WordPress Toolkit reporting old vulnerabilities

nmdpa3

Regular Pleskian
Server operating system version
Ubuntu 22.04
Plesk version and microupdate number
18.0.56 #4
WP Toolkit version - 6.2.11-7659, from a WP Toolkit domain Security Status screen, under the WordPress Vulnerabilities Tab, toolkit continues to reference the following vulnerability:

WordPress <= 6.2 - Unauth. Blind SSRF vulnerability

This is occurring for sites that are on the latest version of WordPress, 6.4, or any version greater than the WP version shown in that vulnerability message.
 

Attachments

  • Screenshot 2023-11-08 at 11.09.06 AM.png
    Screenshot 2023-11-08 at 11.09.06 AM.png
    48.4 KB · Views: 20
  • Screenshot 2023-11-08 at 11.09.45 AM.png
    Screenshot 2023-11-08 at 11.09.45 AM.png
    61.8 KB · Views: 18
Hey @nmdpa3, thanks for letting us know. Seems like this might be an oversight on the vulnerability vendor side, I'll ask them if they can address this.
 
Back
Top