websavers Posted yesterday at 01:24 PM Share Posted yesterday at 01:24 PM This is related to this vulnerability in Plesk API: https://support.plesk.com/hc/en-us/articles/42139500580119-Vulnerability-CVE-2026-58046-Blind-SQL-injection-in-Plesk-s-XML-RPC-API Plesk has been pushing out automatic workarounds for a vulnerability to version 18.0.78. The workaround disables access using older Plesk API versions, and will block WHMCS SSO. Since the actual solution to the vulnerability has been applied in 18.0.79 Update #4 it seems the strict API version checking isn't necessary. That means to resolve this you only need to update Plesk to 18.0.79 Update #4. If you wish to stay on an earlier version of Plesk, it will either be vulnerable or inaccessible through WHMCS's SSO function unless WHMCS changes the Plesk API version that they connect with. Updating to the latest version of Plesk is simpler and something you can do rather than waiting on WHMCS devs. 0 Quote Link to comment Share on other sites More sharing options...
SimonG Posted yesterday at 03:20 PM Share Posted yesterday at 03:20 PM Hello websavers, how did you update to Plesk 18.0.79 Update #4 ? Plesk updater currently offers only version 18.0.79 Installing this version will destroy WHMCS SSO with Plesk. So you say by installing update #4 SSO will work again, correct? 0 Quote Link to comment Share on other sites More sharing options...
SimonG Posted 23 hours ago Share Posted 23 hours ago After update to Plesk 18.0.79 Update #4 the SSO does not work. WHMCS is not able to communicate with Plesk anymore. This is really really bad. Does it work for you? If so, which version of WHMCS are you using? 0 Quote Link to comment Share on other sites More sharing options...
SimonG Posted 22 hours ago Share Posted 22 hours ago Plesk Support suggests executing this command after updating to Plesk 18.0.79.4 (18.0.79 Update #4😞 plesk daily LoadCustomizations Now SSO is working again. 1 Quote Link to comment Share on other sites More sharing options...
websavers Posted 1 hour ago Author Share Posted 1 hour ago 21 hours ago, SimonG said: Plesk Support suggests executing this command after updating to Plesk 18.0.79.4 (18.0.79 Update #4😞 plesk daily LoadCustomizations Now SSO is working again. Interesting! I wonder if that's supposed to happen automatically, but did not in this case. Thanks for the tip 🙂 0 Quote Link to comment Share on other sites More sharing options...
SimonG Posted 1 hour ago Share Posted 1 hour ago I agree, this should happen automatically but maybe only once a day during run of Plesk daily task. To wait until the daily task has run was no option. 0 Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.