All articles — page 3
Blesta 6.0.3 security patch: upgrade from 6.0.0–6.0.2 now
Blesta 6.0.3 fixes several undisclosed security issues rated High in Blesta 6.0.0 to 6.0.2, plus Square and Stripe payment bugs. How to check your version and apply the patch.
Three CISA KEV kernel CVEs: patching CloudLinux servers now
CISA lists CVE-2025-39964, CVE-2026-53266, and CVE-2025-39682 as exploited in the wild. Per-branch CloudLinux status, kernel builds, livepatches, and the one mitigation.
Fix 502 Bad Gateway on Plesk — nginx, Apache, and PHP-FPM
Diagnose 502 Bad Gateway errors on Plesk from the nginx proxy error log — refused upstreams, saturated PHP-FPM pools, oversized headers, and Apache restarts.
Recover a crashed MariaDB with innodb_force_recovery on cPanel
MariaDB won't start on a cPanel server after a crash or full disk. Read the error log, pick the lowest safe innodb_force_recovery level, dump everything, and rebuild.
Fix "exceeded the max defers and failures per hour" on cPanel
Why Exim discards a cPanel domain's outgoing mail with "max defers and failures per hour", how to find the bouncing recipients, and when to reset the block safely.
Imunify360 Malware Database Scanner: scan and clean WordPress DBs
Enable the Imunify360 Malware Database Scanner, run imunify_dbscan by hand against WordPress, Joomla, or Magento 2 databases, and roll back a cleanup from its CSV backup.
Send cPanel mail from a per-domain IP with mailips and mailhelo
Pin outbound Exim mail to a specific IP and HELO per domain on cPanel using /etc/mailips and /etc/mailhelo — the WHM toggles, file syntax, PTR rules, and how to verify it.
WordPress reinfected after cleanup: hunt the persistence layer
A WordPress site that keeps reinfecting after a clean scan usually has a persistence layer the scanner doesn't see. Here's how to find it on a cPanel box, browser included.
Plesk email deliverability: SPF, DKIM, DMARC, and rDNS setup
Configure SPF, DKIM, DMARC, and reverse DNS on Plesk Obsidian so Gmail and Outlook accept your mail — including the DNS template defaults that quietly break third-party senders.
cPanel TSR-2026-09-29: patch three WHM security vulnerabilities
cPanel TSR-2026-09-29 fixes two stored XSS flaws in WHM and a Multilang Adminbin authorization bypass that may permit command execution. Check your full build number and update now.
Page 3 of 28 — 276 articles