Simple Machines Forum project has released SMF 1.1.18 and SMF 2.0.4 security patches for the SMF community.
A few critical security issues have been identified in the two maintained versions and are fixed with this update, therefore it is recommended to make sure you update your forums immediately to ensure your community is safe. For SMF 2.0.x this update includes a few other minor bugs that have been fixed.
If you are running 2.0.3, you can update your forum to 2.0.4 using the package manager. You should see the upgrade notification in the Admin panel and in the package manager, allowing you to download and install seamlessly. If you don’t have a notification about the update, please run the scheduled task “Fetch Simple Machines files”.
You can also download the update for 2.0.3 from the customize site (Upgrades site page): smf_patch_2.0.4.tar.gz, and install it using the package manager.
If you are running 1.1.17, you can update to 1.1.18 from the package manager, following the instructions in the notification in the Admin panel, or downloading the patch from the customize site (Upgrades site page): smf_patch_1.1.18.tar.gz, and installing it using the package manager.
If you use older versions of SMF, you can upgrade with the full upgrade packages from the downloads page.
Please find the changelog for the latest release, as usual, on the downloads page as well: