Security Update 2023-06-20
An important payment assertion issue and an XSS security issue have been identified that affect all versions of WHMCS. We have published new releases for active and LTS versions of WHMCS (v8.7 and...
By David
An important payment assertion issue and an XSS security issue have been identified that affect all versions of WHMCS. We have published new releases for active and LTS versions of WHMCS (v8.7 and...
By David
A security issue has been identified that affects versions 8.5 and 8.6 of WHMCS. As a result, we have published new releases of WHMCS 8.5 and 8.6. All earlier versions of WHMCS are unaffected. ...
By David
A security issue has been identified that affects all versions of WHMCS. As a result, we have published new releases for all actively supported versions of WHMCS as well as a patch which can be...
By Matt
Hello, We are writing to advise you of a potential security vulnerability when htaccess directives are not enforced appropriately for WHMCS. This most commonly occurs in web server environments such...
By Matt
Today we have released maintenance updates for the 7.5 and 7.6 series of WHMCS as well as promoted WHMCS 7.7 to General Availability. The 7.5 and 7.6 releases address usability and bug fix...
By Matt
Four potential security issues have been identified in WHMCS 7.5 and earlier. It is recommended that you apply this patch as soon as possible. The issues resolved include: - Project permissions...
By David
Exploit type: Remote Code Execution in third-party PHPMailer libraryCVE Numbers: CVE-2016-10033 and CVE-2016-10045 Description All versions of the third-party PHPMailer library distributed with WHMCS...
By Matt
On August 2nd, 2016 we issued a security patch for the v6 series - https://blog.whmcs.com/?t=116515. The following discloses the related security concern reported through our Security Bounty...
By Matt
A security update has been released for all versions of WHMCS V6.x. We evaluate the severity of this issue to be of a Moderate security rating (see Security Level Definitions). We are providing a...
By Matt