• The APS Catalog has been deprecated and removed from all Plesk Obsidian versions.
    Applications already installed from the APS Catalog will continue working. However, Plesk will no longer provide support for APS applications.
  • Please be aware: with the Plesk Obsidian 18.0.78 release, the support for the ngx_pagespeed.so module will be deprecated and removed from the sw-nginx package.

Issue WordPress Toolkit reporting old vulnerabilities

nmdpa3

Regular Pleskian
Server operating system version
Ubuntu 22.04
Plesk version and microupdate number
18.0.56 #4
WP Toolkit version - 6.2.11-7659, from a WP Toolkit domain Security Status screen, under the WordPress Vulnerabilities Tab, toolkit continues to reference the following vulnerability:

WordPress <= 6.2 - Unauth. Blind SSRF vulnerability

This is occurring for sites that are on the latest version of WordPress, 6.4, or any version greater than the WP version shown in that vulnerability message.
 

Attachments

  • Screenshot 2023-11-08 at 11.09.06 AM.png
    Screenshot 2023-11-08 at 11.09.06 AM.png
    48.4 KB · Views: 20
  • Screenshot 2023-11-08 at 11.09.45 AM.png
    Screenshot 2023-11-08 at 11.09.45 AM.png
    61.8 KB · Views: 18
Hey @nmdpa3, thanks for letting us know. Seems like this might be an oversight on the vulnerability vendor side, I'll ask them if they can address this.
 
Back
Top