bbPress 2.6.4 is out!

bbPress 2.6.4 is a security release, and fixes 8 total issues reported by our amazing, patient, and vigilant community members:

  • Fixes an obscure security issue with BuddyPress Group Forums, allowing Group Members to save Topics to invalid Forum IDs
  • Fixes performance degradation for 2.5 database schemas
  • Fixes a few typos
  • Fixes some debug notices
  • Fixes user email changes using the wrong API
  • Improves compatibility with PHP 7.2 and higher

Special thanks to Yuvraj Dighe for his responsible disclosure of the BuddyPress Group Forums bug over at HackerOne. Thank you for helping improve bbPress.

Work continues on improving bbPress 2.6 while also doing a bit more clean-up for 2.7.

Expect for the next minor release (bbPress 2.6.5) to be released sometime before March 1.

文章目錄



發表評論

發表回覆

您的郵箱地址不會被公開。 必填項已用 * 標註