The Client Management, Billing & Support Solution for Web Hosts, WHMCS today made WHMCS V5.2.4 available for all WHMCS license holders to download. The news comes a month after WHMCS announced the release of WHMCS Version 5.2.
To upgrade, customers need to download the update from WHMCS client area, unzip and then upload the files to their WHMCS installation. No install or upgrade process is necessary. WHMCS is also offering their professional upgrade service where they’ll handle the entire update process for the customer.
It has also released new patches addressing a vulnerability for WHMCS version 4.0, 4.1, 4.2, 4.3, 4.4, 4.5, 5.0, and 5.1. These updates provide targeted changes to address security concerns with the WHMCS product and are highly recommended for those not running WHMCS 5.2.
As of now, WHMCS has released only limited information regarding the vulnerabilities. Once all the WHMCS customers update their installed software, WHMCS will release additional information regarding the nature of the security issue, most likely on May 28th, 2013.
WHMCS classifies security issues discovered by rating them. Security ratings for the above mentioned updates can be found here.
According to an official blog post by WHMCS, the resolved security issue was identified by Dinesh Kumar Mohanty of Ultra Web Solutions Private Limited, India. The latest public releases of WHMCS are available inside the members area.
You can Download and apply the appropriate patch files for WHMCS Version 4.x by clicking on the links below. To apply the patch, simply download the appropriate patch file specific to the WHMCS version you are running, extract the contents, and upload the files from the /whmcs/ folder to your installation. No install or upgrade process is required.
Full-version and patches for the WHMCS V5.0 and V5.1 are located in the WHMCS members area download section, under license details.