Announcements

It's been a week since our last beta release, so today, in the interest of maximising the time customers get to test the software before it becomes our supported version, we're rolling up all the changes we've made since then and calling it XenForo 2.2.0 Beta 3. We have been concentrating mostly on the core code during this time, so this release includes changes solely to XenForo itself with the exception of a bug fixed in Enhanced Search. We strongly recommend anyone testing 2.2 during this beta period upgrade as each beta version is released. Specific details regarding bugs fixed in this release can be found in the resolved bugs forum. This is beta software. It is not officially supported. We do not recommend running it in...

Today, we continue the beta stage of XenForo 2.2 with Beta 2. This release fixes a number of bugs found since the previous release, and adds a number of new features and improvements, including: Thread type tools GIPHY integration, image proxy bypass and audio uploads PWA setup helper and Web share API Article thread and forum updates and improvements We strongly recommend anyone testing 2.2 during this beta period upgrade as each beta version is released. More specific details regarding bugs fixed in this release can be found in the resolved bugs forum. This is beta software. It is not officially supported. We do not recommend running it in production. Please remember that this is beta software. It contains known bugs and...

We are delighted to announce that XenForo 2.2.0 Beta 1 is now available to all customers with active licenses. XenForo 2.2 includes a large number of new features and improvements, including: Forum and thread types system Updated rich text editor User profile banners Username change requests Search forums Forum SEO controls Writing before registering support Progressive web app Activity summary emails Style archive import and export REST API additions Profile post attachments And much more! You can read more about the above and other new changes/improvements features in the Have you seen...? forum. This is beta software. It is not officially supported. We do not recommend running it in production. Please remember that this is beta...

XenForo 2.1.10 Patch 2 Released Shortly after releasing 2.1.10, we became aware of an incompatibility related to how some add-ons add custom CSS to the control panel. This could lead to the control panel appearing unstyled. In order to resolve this, we have released XenForo 2.1.10 Patch 2. You can perform the upgrade directly from your control panel by going to Tools > Check for upgrades (<url>/admin.php?tools/upgrade-check if you do not see the link due to display issues). You can also download the update from your Customer area and upgrade manually. (Note that Patch 1 was briefly released and has been superseded with Patch 2 to resolve this issue.)

XenForo 2.1.10 is now available for all licensed customers to download. We recommend that all customers running previous versions of XenForo 2.1 upgrade to this release to benefit from increased stability. Most importantly, this release fixes a security vulnerability in XenForo. The issue is a XSS vulnerability. XSS (Cross Site Scripting) issues allow scripts and malicious HTML to be injected into the page, potentially allowing data theft or unauthenticated access. The vulnerability requires some very specific steps to be taken, involving pasting malicious content into the XenForo rich text editor, which may mean it is difficult to trigger. XenForo extends thanks to @TickTackk for reporting the issue. While we recommend doing a full...

Today, we are releasing XenForo 2.1.9 and XenForo 2.0.13 to address a potential security vulnerability that may affect any customer who makes use of our PayPal payment handler. As well as user upgrades, this may affect add-ons you have installed which process payments using our PayPal payment handler. We recommend that all affected customers running XenForo 2.1 or XenForo 2.0 upgrade to 2.1.9 or 2.0.13 or use one of the attached patch files as soon as possible. Specifically, the issue relates to a specially crafted callback (or IPN) which is then processed successfully using PayPal's sandbox validation endpoint instead of their live system. If successful, a purchase could be completed without your PayPal account actually receiving...

XenForo 2.1.8 Patch 2 Released We have identified an issue in 2.1.8 that may cause certain template modifications in add-ons to not be applied correctly. This issue is discussed in more detail in this bug report. In order to resolve this, we have released XenForo 2.1.8 Patch 2. You can perform the upgrade directly from your control panel by going to Tools > Check for upgrades. You can also download the update from your Customer area.