EUVD-2025-200986CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Lifecycle Timeline
3Tags
Description
WebPros Plesk before 18.0.73.5 and 18.0.74 before 18.0.74.2 on Linux allows remote authenticated users to execute arbitrary code as root via domain creation. The attacker needs "Create and manage sites" with "Domains management" and "Subdomains management."
Analysis
A remote code execution vulnerability in WebPros Plesk before 18.0.73.5 and 18.0.74 before 18.0.74.2 on Linux (CVSS 7.8) that allows remote authenticated users. High severity vulnerability requiring prompt remediation.
Technical Context
Vulnerability type: remote code execution. CVSS 7.8 indicates high severity. Affects WebPros Plesk before 18.0.73.5 and 18.0.74 before 18.0.74.2 on Linux.
Affected Products
['WebPros Plesk before 18.0.73.5 and 18.0.74 before 18.0.74.2 on Linux']
Remediation
Monitor vendor channels for patch availability.
Priority Score
Share
External POC / Exploit Code
Leaving vuln.today