Xenforo - Full Release 2.1.9

Xenforo 2.1.x Xenforo - Full Release 2.1.9 2.1.9

No permission to download Buy VIP
  • Hi Guest, Do you have an idea for us? Post it here and maybe you will win the VIP Master package! (VIP For the rest of your membership!)
Nulled by NullScriptz

Today, we are releasing XenForo 2.1.9 and XenForo 2.0.13 to address a potential security vulnerability that may affect any customer who makes use of our PayPal payment handler.

As well as user upgrades, this may affect add-ons you have installed which process payments using our PayPal payment handler.

We recommend that all affected customers running XenForo 2.1 or XenForo 2.0 upgrade to 2.1.9 or 2.0.13 or use one of the attached patch files as soon as possible.

Specifically, the issue relates to a specially crafted callback (or IPN) which is then processed successfully using PayPal's sandbox validation endpoint instead of their live system. If successful, a purchase could be completed without your PayPal account actually receiving any funds.

There are no other fixes included in this version. There will be a further 2.1 maintenance release in the coming weeks.

Applying a Fix: Upgrading

You may upgrade to 2.1.9 or 2.0.13 to fix this issue. You should upgrade as you would to any other release.

Customers with an active license may download 2.1.9 or 2.0.13 from their customer area. Full details for how to install and upgrade XenForo can be found in the XenForo Manual.

If you are running XF 2.1 you can upgrade directly from within your control panel.
Author
WinSys32
Downloads
0
Views
156
Extention type
zip
File size
12.2 MB
Hash
6830bfa8634a572c7c70c65ebd234b30
First release
Last update
Rating
0.00 star(s) 0 ratings

More resources from WinSys32