Happy new year! 🥳 We're starting this year great with a few awesome new updates!
CVE insights
Some of you might have noticed that we have a new insight that scans for common vulnerabilities and exposures.
This insight automatically scans the Composer packages across all your sites and checks them against known security vulnerabilities. If any of your dependencies have reported CVEs, you'll see them appear in your insights dashboard with details about the affected package, severity, and recommended actions.
How it works:
For newer servers, Ploi runs composer audit to check for known vulnerabilities
For older servers (created before 2025), Ploi parses your composer.lock and checks packages against the PHP Security Advisories database
Vulnerabilities are grouped by severity and displayed with direct links to more information
What you can do
Review affected packages and their safe versions
Update your dependencies to patch the vulnerabilities
Mark insights as fixed once you've addressed them
This feature is available for Pro plans and higher. Head over to your server's Insights page to see if any of your applications need attention.
Server insight notifications
Also new, the notifications tab when you visit the insights in your server. In here, you can define the notifications you'd like to receive when new insights come in. You can create them per-server and per-priority type!
Fresh status page design
We also took the opportunity to create a fresh status page design and fixed some of the bugs that are present, including a dark-mode toggle for your users.
Changelog
[Added] New status page design
[Added] PostgreSQL 18 support
[Added] PHP CLI version change available in API now: https://developers.ploi.io/php/switch-php-cli-version
[Added] A proper payment retry system for whenever payments fail, we will try 3 times within a week and notify you each time a failure happens
[Improved] Global server insights overview now uses a proper table with filters: https://ploi.io/panel/dashboard/insights
[Improved] When installing a PHP version you now actually get proper UI feedback when installing
[Refactored] Settings page in profile is streamlined with tabs now
[Fixed] Issue when uninstalling PHP 8.5
[Fixed] Issue where insights would duplicate itselfves, they now replace itself instead
[Fixed] Issue when deleting a tenant and their SSL won’t be deleted, this is now forced properly
[Fixed] Issue for duplicate cronjob creation for server monitoring