security

We have recently learned that there is a vulnerability  in the code which allows visitors to upload their own module in your back office. This can happen if you have opened up your back office in DEMO mode. As soon as we learned about it and found the fix, we have made a patch version which doesn't require you to update your whole store, but allows to just patch version 1.0.0 instead. The next version 1.0.1 will already contain the fix. Information What is affected? Module and theme developers often provide a back office demo. If you provide a thirty bees back office demo, [...]