WHMCS released new versions for both 8.5.x and 8.6.x to address unspecified security issues.
“All earlier versions of WHMCS are unaffected,” according to the blog post. “The issue was reported privately and there is no evidence to suggest it is known publicly. We will not be releasing any further details about the issue at this time.”
Indeed, WHMCS is generally very secretive about their security issues. A comment on that post notes that WHMCS has not issued a CVE since 2012.
Related Posts:

DreamHost Urges Affected Customers to Reset All Email and FTP Passwords
A Graph Showing Why It's Not a Fun Time to Work in IT

Patch Your PHP! The PHPopaclypse is Upon Us!

Browser Fingerprinting is Frighteningly Accurate

Yet Another cPanel and WHMCS Price Increase. But You're Getting More Value. Right? (Right?)



Leave a Reply