Search results

Plesk, can you let us know the timeline for the release of the patches or updates for BIND9? The Dutch National Cyber Security Centre (and security agencies worldwide) are urging immediate patching of BIND 9 due to a critical DNS cache poisoning vulnerability known as CVE-2025-40778...

Thanks again for your continued updates. We are now again receiving Imunify notifications.

@Sebahat.hadzhi can you provide us with a new update please?

Can we downgrade ImunifyAV? The new ImunifyAV+ has no value for us.

and just now I also noticed that no information related to Malware is displayed to Customers anywhere.... A customer needs to open the Imunify module to see what's going on.... The new ImunifyAV+ does not notify and does not display any information to customers o_O.

Can you please stop the upgrade from "ImunifyAV" to "ImunifyAV+"? The extension is quite pointless without notifications.

@bgptbg Plesk was able to reproduce it in their test environment on a newly created domain. Their development team has started an investigation which takes 2-3 business days.

We are seeing the same bug on all our updated Plesk systems. Workaround: create a new dkim key with name selector1 (or something else) activate and save create a new dkim key with name default activate and save delete dkim key selector1

Did you check the support page? There is a tab for CentOS 7. https://support.plesk.com/hc/en-us/articles/32537488344343-CVE-2025-49113-Vulnerability-in-Roundcube-on-Plesk-servers

@Sebahat.hadzhi many thanks for the quick patch :)

Roundcube has a new vulnerability: CVE-2025-49113 Aleksander Machniak has released a secutity update: Roundcube Webmail 1.6.11 When can we expect this fix to be included in Plesk?

Awesome! That is great to learn. The issue must be related to smartUpdateCrawlerPagesLimit , because the sitemap is working fine. Thank you! Problem solved!

Good afternoon, I really like the Smart Update within WordPress Toolkit. I have a question in regards to the 100 pages that are checked: - Test Run Summary -- 100 pages checked 1: website.nl/blog 2: website.nl/en/blog/this-is-an-example 3: website.nl/en/blog/fast-hosting-drives-conversions...

You can't :(

Hello everyone, A well known vulnerability scanner reported that our Plesk server (Ubuntu 22, Obsidian 18.0.66 Update #2) is vulnerable for TLS BREACH attacks (cve-2013-3587). The vulnerability scanner checks if the remote web server has HTTP compression enabled and if it does report the...

@sulabhpuri you should add the Cloudflare IP ranges to the Trusted IP Addresses list: /admin/server-protection/trusted-list This might have to do with your Cloudflare configuration. I believe you need to configure CF to forward the correct ip addresses.

Yeah, the Plesk Migration Manager works great. Make sure to do some 'dry runs' with all the data to see what issues might turn up and to figure out how long a migration takes. For some servers we did 10 of these dry runs and while keeping an eye on the extended logs found and fixed all sort...

We did not dare to use it. We choose a Plesk to Plesk migration for dozens of servers.

We use this combined fail2ban filter: failregex = ^<HOST>.* "POST .*(wp-login.php|xmlrpc.php)([/\?#\\].*)? HTTP/.*" 200|401 ignoreregex = as suggested in this post from 2017: Resolved - custom Fail2ban Login Wordpress not working

Hi there, We have (a license for) WP Toolkit Deluxe for Web Host. We have disabled 'WP Toolkit Smart PHP Update' feature within the Service Plan's and subscriptions. Despite of these settings the feature remains available for our customers. Is the 'WP Toolkit Smart PHP Update' permission locked...