XenForo 2.1.13 & 2.1.14 Released (Security Fix) 2.1.14 Security Patch

Note: There are no other changes in this release and any work previously done towards XenForo 2.2.11 - including a new CAPTCHA option by Cloudflare Turnstile and various bug fixes and improvements - will be released alongside XenForo 2.2.12 in the coming weeks.

Applying a patch manually​

Download the 2213patch.zip file attached to this message. It will contain the following file:

1. src/XF/BbCode/Renderer/EditorHtml.php

Extract the zip file to your computer and upload the contents to the root of your XenForo installation. This should overwrite the files on your server with the new version.

Note: If you decide to patch the files instead of doing a full upgrade, your "File health check" will report this file as having "Unexpected contents". Because these files no longer contain the same contents your version of XF was shipped with, this is expected and can be safely ignored.


To download XenForo 2.2.12, go to the revelant topic