As well as user upgrades, this may affect add-ons you have installed which process payments using our PayPal payment handler.
We recommend that all affected customers running XenForo 2.1 or XenForo 2.0 upgrade to 2.1.9 or 2.0.13 or use one of the attached patch files as soon as possible.
Specifically, the issue relates to a specially crafted callback (or IPN) which is then processed successfully using PayPal's sandbox validation endpoint instead of their live system. If successful, a purchase could be completed without your PayPal account actually receiving any funds.
There are no other fixes included in this version. There will be a further 2.1 maintenance release in the coming weeks.
Applying a Fix: Upgrading
You may upgrade to 2.1.9 or 2.0.13 to fix this issue. You should upgrade as you would to any other release.
Upgrade
Full
This hidden content has been reported as still working 0 times this month.
1 times in total