Chevereto - Image Hosting Script v4.5.8 Nulled

Decryption key:

To view the content, you need to Sign In or Register.

Chevereto - Image Hosting Script v4.5.8 Nulled
We are pleased to announce the immediate availability of Chevereto v4.5.8. For a complete introduction to this release, refer to Security update V4.5.8.

This security update patches critical vulnerabilities within Chevereto >= 3.0.0, < 4.5.8. If you are running a Chevereto based system you need to update at your earliest convenience. Full PoC disclosure will be revealed in 2 weeks from now.

Chevereto V4.5.8 release notes

• Added CLI command to generate Cloudflare trusted proxies
• Added Cloudflare trusted proxy support in get_client_ip() function
• Added column name validation for SQL queries in the DB class
• Added installation details to update checks
• Added support for trusted proxies (CHEVERETO_HEADER_CLIENT_IP_TRUSTED_PROXIES)
• Added TLS verification on curl calls
• Fixed 19 security vulnerabilities (8 moderate, 7 high, 4 critical)
• Fixed bug preventing storage service attribute changes
• Fixed bug with guest image tracking when using Redis backed sessions
• Fixed bug with page cache not being cleared after inserting a new page
• Fixed bug with upload media type detection trusting the client provided MIME type
• Fixed bug with variables cache storing encrypted values instead of plaintext
• Improved Akismet integration with HTTPS, caching, no server params sent
• Improved FFprobe error handling to log details instead of displaying them
• Removed storage minimum capacity constrain

Decryption key:

To view the content, you need to Sign In or Register.

Chevereto - Image Hosting Script v4.5.7 Nulled
Bug Fixes & Stability Improvement Patch

Decryption key:

To view the content, you need to Sign In or Register.

Chevereto - Image Hosting Script v4.5.5 Nulled
Chevereto 4.5.5 (2026-07-10)

- Added CHEVERETO_TENANTS_DB_ISOLATION_MODE
- Added configurable system notices display
- Added links to user manual and admin manual on dashboard
- Added warning to account resend activation when email delivery isn't configured
- Added warning to password forgot when email delivery isn't configured
- Added warning to signup when email delivery isn't configured
- Disabled email-dependent settings when no email provider is configured
- Disabled guest uploads by default
- Disabled user self-signup by default
- Fixed bug with wrong user URL when website mode personal is enabled
- Fixed bug with missing album options when editing upload item
- Fixed bug with theme overrides not working for overrides/views/dashboard/*
- Fixed bug with theme overrides not working for overrides/views/settings/*
- Improved email settings validation and error handling

Decryption key:

To view the content, you need to Sign In or Register.

Chevereto - Image Hosting Script v4.5.4 Nulled
V4.5.4 release notes

• Redesigned default Contact page (HTML)
• [Security] Fix private account setting leaking username on /json endpoint

Decryption key:

To view the content, you need to Sign In or Register.

Chevereto - Image Hosting Script v4.5.3 Nulled
Added CHEVERETO_ENVIRONMENT default value
Added CSRF protection to POST /account/* endpoints
Added CSRF protection to POST /album endpoint (password protected albums)
Added Variables support to the encrypt-secrets and decrypt-secrets commands
Fixed bug affecting PHP page creation/editing
Fixed bug breaking TenantsConfig
Fixed bug causing missing support for theme library overrides
Fixed bug with FTP storage API not creating date folder structure
Fixed bug with missing login-providers.php file in Lite edition
Fixed missing success message after creating a new user from dashboard
Removed support for FTP/SFTP storage APIs in SaaS context

Decryption key:

To view the content, you need to Sign In or Register.

Chevereto - Image Hosting Script v4.5.2 Nulled
Chevereto 4.5.2 (2026-04-21)

• Added CHEVERETO_INTERNAL_HOSTNAME environment variable
• Added CHEVERETO_PROXY_ENTRYPOINT environment variable
• Added CHEVERETO_PROXY_IP_ALLOW_LIST environment variable
• Added CHEVERETO_ROUTER_SECRET, CHEVERETO_HEADER_FORWARDED_HOST, and CHEVERETO_HEADER_ROUTER_SECRET environment variables
• Added CHEVERETO_SERVICE_NAME environment variable
• Added CHEVERETO_SERVICE_PORT environment variable
• Added missing root namespace configuration in Traefik configuration
• Added support for Traefik Cloudflare middleware
• Added support for X-Forwarded-Host and X-Router-Secret headers
• Fixed JSON YAML syntax error in Traefik configuration
• Improved system notices
• Renamed CHEVERETO_TENANTS_API_ALLOW_LIST to CHEVERETO_TENANTS_API_IP_ALLOW_LIST
• Setting email_mode is now optional

Decryption key:

To view the content, you need to Sign In or Register.

Chevereto - Image Hosting Script v4.5.1 Nulled
Major Upgrade!
refer to https://releases.chevereto.com/4.X/4.5/4.5.0.html for full changelog

Decryption key:

To view the content, you need to Sign In or Register.

Chevereto - Image Hosting Script v4.4.2 Nulled
Chevereto 4.4.2 (2026-01-06)

• Fixed bug with "Upgrade now" button display
• Fixed bug in /settings/api route display
• Fixed bug in delete URL not working
• Fixed bug in Free edition missing Follow class
• Fixed API documentation links

Decryption key:

To view the content, you need to Sign In or Register.

Chevereto - Image Hosting Script v4.4.1 Nulled
refer to forums for changelog

Decryption key:

To view the content, you need to Sign In or Register.

Chevereto - Image Hosting Script v4.4.0 Nulled
this is major upgrade
- refer to forums for changelog