CVE-2021-45008: Plesk

High severity, CVSS 8.8. EPSS: 2% chance of exploitation in the next 30 days.

Plesk CMS 18.0.37 is affected by an insecure permissions vulnerability that allows privilege Escalation from user to admin rights. OTE: the vendor states that this is only a site-specific problem on websites of one or more Plesk users

Affected products

• Plesk Plesk: version 18.0.37 only

Published 2022-02-21. Last modified 2026-06-17.