Hello vBSEO customers and friends,
An exploit was recently brought to our attention in the vbseo 3.5.2 codebase. All customers running vBSEO 3.5.2 are urged to upgrade/patch their sites IMMEDIATELY to avoid any potential security issues with your forum. If you are running vBSEO 3.5.2, you should either:
- Re-download 3.5.2 from the http://www.vbseo.com/downloads/ area and re-install via this new package. There will be no version number or patch level change. You do not need to upload the config file or import the product (but won't hurt if you do, just be sure to save your password/key to populate the config file again as in a normal upgrade)
- Upgrade to vBSEO 3.6.0, also available in the http://www.vbseo.com/downloads/ area (preferred method)
This exploit ONLY effects 3.5.2. No other versions are at risk. If you are not running version 3.5.2 on any of your sites, you can ignore this notice.
If you need assistance, please open a ticket or new thread in the troubleshooting area. Our upgrade service is also available for our non-technical customers.
The vBSEO Team