We are aware of a potentially service impacting issue. Learn more

WHMCS vulnerability update 25 October 2013

  • Friday, 25th October, 2013
  • 07:24am
Clients using WHMCS should update their installation and disable 'mass payments' option at this moment:

from the WHMCS blog ( http://blog.whmcs.com/?t=80587 )

As you may be aware, a security issue has been published within the last hour which allows for information disclosure.

We are aware of the issue and are investigating it, and will be issuing a fix for this issue along with any others we discover during our targeted investigation shortly. In the meantime disabling the Mass Payment feature voids the immediate threat.

You can do this by de-selecting the "Enable Mass Payment" checkbox in Setup > General Settings > Invoices and saving.

Please watch our blog, facebook and twitter feeds to receive the latest updates.

« Back