• If you are still using CentOS 7.9, it's time to convert to Alma 8 with the free centos2alma tool by Plesk or Plesk Migrator. Please let us know your experiences or concerns in this thread:
    CentOS2Alma discussion
  • Inviting everyone to the UX test of a new security feature in the WP Toolkit
    For WordPress site owners, threats posed by hackers are ever-present. Because of this, we are developing a new security feature for the WP Toolkit. If the topic of WordPress website security is relevant to you, we would be grateful if you could share your experience and help us test the usability of this feature. We invite you to join us for a 1-hour online session via Google Meet. Select a convenient meeting time with our friendly UX staff here.

Issue WordPress Toolkit reporting old vulnerabilities

nmdpa3

Basic Pleskian
Server operating system version
Ubuntu 22.04
Plesk version and microupdate number
18.0.56 #4
WP Toolkit version - 6.2.11-7659, from a WP Toolkit domain Security Status screen, under the WordPress Vulnerabilities Tab, toolkit continues to reference the following vulnerability:

WordPress <= 6.2 - Unauth. Blind SSRF vulnerability

This is occurring for sites that are on the latest version of WordPress, 6.4, or any version greater than the WP version shown in that vulnerability message.
 

Attachments

  • Screenshot 2023-11-08 at 11.09.06 AM.png
    Screenshot 2023-11-08 at 11.09.06 AM.png
    48.4 KB · Views: 17
  • Screenshot 2023-11-08 at 11.09.45 AM.png
    Screenshot 2023-11-08 at 11.09.45 AM.png
    61.8 KB · Views: 16
Hey @nmdpa3, thanks for letting us know. Seems like this might be an oversight on the vulnerability vendor side, I'll ask them if they can address this.
 
Back
Top