# Plesk 18.0.73.5: end of life

This release line no longer gets security fixes.

- Recommended: 18.0.80.11 (lowest fixed release that is still supported)
- Known vulnerabilities: 14 (10 critical, 4 high, 0 medium, 0 low)
- End of life: yes, since 2025-12-23 (release line 18.0.73)
- Data as of: 2026-10-24 19:22 UTC

## Vulnerabilities

| ID | Severity | Actively exploited | Fixed in |
|---|---|---|---|
| [CVE-2026-68488](https://support.plesk.com/hc/en-us/articles/43248932867351-Vulnerability-in-Plesk-s-Backup-Manager-symlink-race-during-restore-allows-root-privilege-escalation) | critical | no | — |
| [CVE-2026-68487](https://support.plesk.com/hc/en-us/articles/43248841638551-Vulnerability-in-Plesk-s-Backup-Manager-unsigned-backup-header-allows-path-traversal) | critical | no | — |
| [CVE-2026-65646](https://support.plesk.com/hc/en-us/articles/42877023875351-Vulnerability-CVE-2026-65646-in-Plesk-s-DNS-zone-management-functionality) | critical | no | 18.0.79.11 |
| [CVE-2026-64637](https://support.plesk.com/hc/en-us/articles/42432168683799) | critical | no | 18.0.80.1 |
| [CVE-2026-58046](https://support.plesk.com/hc/en-us/articles/42139500580119-Vulnerability-CVE-2026-58046-Blind-SQL-injection-in-Plesk-s-XML-RPC-API) | critical | no | 18.0.79.4 |
| [CVE-2026-56843](https://support.plesk.com/hc/en-us/articles/41178305151255-Vulnerability-in-Plesk-XML-API-Cleartext-FTP-Password-Exposure) | critical | no | 18.0.78.4 |
| [CVE-2026-48614](https://support.plesk.com/hc/en-us/articles/41171817973143-Vulnerability-in-Plesk-XML-API) | critical | no | 18.0.78 |
| [CVE-2026-44962](https://support.plesk.com/hc/en-us/articles/38633651286679-Vulnerability-CVE-2026-44962-in-Plesk-s-APS-Catalog) | critical | no | 18.0.75.1 |
| [CVE-2026-64639](https://support.plesk.com/hc/en-us/articles/42521305418903-Vulnerability-CVE-2026-64639-Privilege-Escalation-via-Database-Cloning-in-Plesk) | critical | no | 18.0.79.6 |
| [CVE-2026-67394](https://support.plesk.com/hc/en-us/articles/42968165026967-CVE-2026-67394-Vulnerability-in-Plesk-allows-privilege-escalation-to-root) | critical | no | 18.0.79.9 |

And 4 more with lower severity.

Installed with apt, yum or another package manager? Your distribution may already have patched this without changing the version, so check its security tracker too.

---

FixedIn gives information, not guarantees. Always confirm with the vendor's advisory before you rely on a result. Source: https://fixedin.dev/plesk/18.0.73.5 · JSON: https://fixedin.dev/plesk/18.0.73.5.json · MCP server: https://fixedin.dev/mcp · About these addresses: https://fixedin.dev/llms.txt