Product by WebPros
WebPros Plesk
14 known vulnerabilities in WebPros Plesk (WebPros), 0 of them actively exploited (CISA KEV).
Key figures
14
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
10
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-67394 | WebPros Plesk: OS Command Injection | — | |
| Critical | CVE-2026-68487 | WebPros Plesk: Absolute Path Traversal | 9.9 | |
| Critical | CVE-2026-65646 | WebPros Plesk: Injection | 9.9 | |
| High | CVE-2026-68492 | WebPros Plesk: Untrusted Search Path | — | |
| Critical | CVE-2026-56843 | Webpros Plesk: Insufficiently Protected Credentials | 9.9 | |
| Critical | CVE-2026-44962 | WebPros Plesk: XPath Injection | 9.9 | |
| Critical | CVE-2026-58046 | WebPros Plesk: SQL Injection | 9.9 | |
| Critical | CVE-2026-48614 | WebPros Plesk: Code Injection | 9.9 | |
| Critical | CVE-2026-64639 | WebPros Plesk: Incorrect Privilege Assignment | — | |
| Critical | CVE-2026-64637 | WebPros Plesk: Improper Privilege Management | 9.9 | |
| Critical | CVE-2026-68488 | WebPros Plesk: Time-of-check Time-of-use (TOCTOU) Race Condition | 9.9 | |
| High | CVE-2026-65642 | WebPros Plesk: Authorization Bypass Through User-Controlled Key | — | |
| High | CVE-2026-64636 | WebPros Plesk: SQL Injection | 7.7 | |
| High | CVE-2026-67397 | WebPros Plesk: Path Traversal | — |
News
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 30sans-atrisk-mail,