A high-severity privilege escalation vulnerability in Plesk’s Password Protected Directories feature allows any low-privileged user on a Plesk-managed server to gain full root-level control of that server. Plesk is widely used by hosting providers and web operations teams to manage websites and server infrastructure; a successful exploit gives an attacker unrestricted access to every site, database, and credential stored on the affected host. Plesk’s official advisory and Belgium’s Centre for Cybersecurity recommend immediate patching; unpatched servers remain at direct risk of complete compromise.