Plesk published advisories on August 25 for three vulnerabilities in its hosting control panel, each with a fix already available. None is described as requiring an administrator login. One could let a customer with an ordinary hosting subscription and a DNS-managed domain read arbitrary server files and recover the panel’s own credentials. One could let an authenticated … Continue reading Plesk Patches Three Flaws That Start From an Ordinary Customer Account