CVE-2025-6630 Analysis

CVE-2025-66430, released on December 12, 2025 and discovered by Philip Okhonko , was assigned a CVSS score of 9.1. This vulnerability allows Plesk users with access to Protected Directories to perform remote code execution (RCE) on the server, potentially granting full control over the system, including emails, databases, and other sensitive data. In this article, I provide an in-depth analysis of…