WHMCS v5.2.10 Vulnerability in Mass pay feature

[Kailash]

There is a security vulnerability in WHMCS v5.2.10 which allows to access any invoice which does not belong to client. WHMCS has advised to disable "Mass Pay" option. You can disable it from Setup > General Settings > Invoices > de-select "Enable Mass Payment" option and save it.

[Kailash]

A patch has been released by WHMCS. Kindly refer the following URL:

http://blog.whmcs.com/?t=80615