6 changes

XFtoWP 1.6.4 Patch 2

Released: April 14, 2026

  • Safer SQL query construction in xf_get_webhooks() and xf_get_log()
  • Fixed an output escaping issue in thread comments
  • Fixed a possible confusion in webhook requests that may prevent valid webhooks from being read
  • Re-enabled SSL certificate verification on license activation and deactivation requests
  • Updated escape methods to values rendered in admin settings fields and API error messages
  • Extra security checks for making API requests to a valid board URL