On October 21, 2026, the PHP project released security updates for two critical vulnerabilities: CVE-2026-109618 and CVE-2026-109619. According to PHP, both vulnerabilities can allow unauthenticated...
By Carlos
Today we have released updates for all actively supported and long-term support (LTS) versions of WHMCS, namely v8.13, v8.12, and v8.11. These updates resolve a number of security vulnerabilities...
By Chen
We are aware that WHMCS customers may have received ransom notices. These notices claim data exfiltration that have occurred in different ways. The notice names the following businesses as their...
By Matt
An important payment assertion issue and an XSS security issue have been identified that affect all versions of WHMCS. We have published new releases for active and LTS versions of WHMCS (v8.7 and...
By David
A security issue has been identified that affects versions 8.5 and 8.6 of WHMCS. As a result, we have published new releases of WHMCS 8.5 and 8.6. All earlier versions of WHMCS are unaffected. ...
By David
A security issue has been identified that affects all versions of WHMCS. As a result, we have published new releases for all actively supported versions of WHMCS as well as a patch which can be...
By Matt
Hello, We are writing to advise you of a potential security vulnerability when htaccess directives are not enforced appropriately for WHMCS. This most commonly occurs in web server environments such...
By Matt
Today we have released maintenance updates for the 7.5 and 7.6 series of WHMCS as well as promoted WHMCS 7.7 to General Availability. The 7.5 and 7.6 releases address usability and bug fix...
By Matt
Four potential security issues have been identified in WHMCS 7.5 and earlier. It is recommended that you apply this patch as soon as possible. The issues resolved include: - Project permissions...
By David