Security Release VirtueMart 4.8.0

Дата публикации: 17-08-2026 13:58:00

Caming back from holidays, our project VirtueMart was unpublished on JED. There was a security audit by a Joomla member with claude and we did not pass. Some of them were already addressed in VirtueMart5, which is almost ready. Some even in not delivered plugins, which we kept in the trunk. So I removed all the old plugins and the vmf folder and moved it to a branch. 
Security Fixes
Skrill payment plugin: There is a security issue with the Skrill payment plugin. If you use it in your store, please either update to this version or remove the plugin entirely.
Token validation
Token checks added to backend controllers and frontend forms. Unauthorized form submissions are now rejected.
Rating System Improvements
Shop owners can now edit customer names and review messages in the backend (voting results remain protected against modification)
Added various validation for example for the generic child selection dropdown when editing ratings
Better handling of limit start and empty checks in rating models
Miscellaneous bug fixes for rating list view styling
Plugin Download simple
Fixed improper check for correct requested media
Enhanced validation for media uploads
First we allow the unsecure files like php in zips now only for files to sale. Furthermore the mime check was before only done for medias and is now done for any file.
RECOMMENDED FOR ALL USERS: Please update to this version, in special if you are using the Skrill payment plugin or manage ratings/reviews for products.
DOWNLOAD VirtueMart 4.8.0
NOW
Payment Plugin Cleanup
We have removed the following legacy payment plugins that are no longer maintained or productively used:

Схожие новости

#	Наименование новости	Тональность	Информативность	Дата публикации
1	Small update for VirtueMart 4.8	0	4.74	31-08-2026
2	Small Fixes for VirtueMart 4 and new Beta for VirtueMart 5	0	6.62	14-04-2026
3	Joomla 6.1.4 & 5.4.9 Security & Bugfix Release	0	16.14	29-09-2026
4	Node.js v24.14.0	0	6.66	25-02-2026
5	Node.js v20.20.1 and v22.22.1	0	6.48	10-03-2026
6	Jetpack 16.1.3: Critical Security Update	0	9.07	02-09-2026
7	WordPress 6.9.4 Security Release	0	13.07	11-03-2026
8	WordPress 7.1.3 Maintenance and Security Release	0	9.37	06-10-2026
9	Video-Tool VLC: Version 3.0.24 stopft über 130 Sicherheitslecks	0	24.31	25-09-2026
10	WinSCP 6.3.8 released	0	17.6	07-04-2026

Классификация: . Схожих патентов: 0. Схожих новостей: 10. Тональность: 0. Информативность: 6.22. Источник: virtuemart.net.