Dear customers !
I’m happy to announce the release of Membership Pro version 4.6.2! This is a security release includes several security improvements for file upload handling:
- The upload endpoint is now automatically disabled unless File custom fields are configured.
- Added additional validation and abuse protection for uploaded files.
- Added a cleanup tool to remove orphaned upload files left by incomplete or abandoned submissions.
- Added a scheduled task to automatically clean up orphaned upload files.
We recommend updating your installation as soon as practical so your website benefits from the latest security enhancements.
After updating:
As a precaution, we recommend:
- Running the new Delete Orphan Files tool to remove any unauthenticated upload files that may have been left behind before the update.
- Configuring the Delete Orphan Files scheduled task if your site uses File custom fields and you want automatic cleanup in the future.
Documentation:
Joomla 3 users:
If you are still Joomla 3, patch is also available in version 3.6.3. You just need to configure Download ID and update to the latest version using Joomla updaters to have the issues addressed. If you cannot update using Joomla updater for some reasons, submit a support ticket and we will send you the package.
Thanks for continue using our products and support our development
Regards,
Tuan
