On Wednesday 10/21/26, CISA announced several serious vulnerabilities in PHP, used by about 70% of web sites.
Emergency patches were generated, and we applied these patches to all Plesk servers.
These patches cover PHP versions back to 7.4.33 (past end-of-support but patched anyway). All HIS Plesk email and web hosting customer sites are covered by these patches, and there is no action that customers need to take.