[thincom2000]

A new set of patches was released this week to address the most recently discovered vulnerability: https://www.vaultwiki.org/articles/200/
Please make sure you are using a patched release if your installation is live.

Please note that there was a patch uploaded to this thread prior to my post. That ZIP was broken, but a working version is now attached as of this post.

[thincom2000]

It is highly recommended that users apply the latest patch, which fixes broken unsubscribe links: https://www.vaultwiki.org/articles/202/

[thincom2000]

Uploaded 4.0.17 Patch Level 1, which includes the following:

• Create New Page button on Wiki Index
• Remove All User Subscriptions via Inline Moderation
• Renamed some Admin Panel headings to avoid confusion
• Fixed Subscription Management Flaw VWE-2017-3677 (see: https://www.vaultwiki.org/articles/209/)
• Fixed guests can't view user's list of feeds
• At least 20 other bugs were fixed

[In Omnibus]

The file exists, however it is in /plugins and not in /plugins/forum as the path indicates.

Fatal Error: attempted to instantiate non-existent class vw_Plugins_Forum_Model
[path]/vault/core/model/plugins/forum/vw.php does not exist or does not contain the specified class.

#0: vw_Hard_Core::fetch_object() in [path]/vault/core/model/vw.php at line 682
#1: vw_Hard_Core::model() in [path]/showthread.php(2406) : eval()'d code at line 260
#2: eval() in [path]/showthread.php at line 2406

Please forward this error to VaultWiki technical support at https://www.vaultwiki.org/support/4X/ or email [email protected].

[thincom2000]

In AdminCP > Plugins & Products > Plugin Manager, locate the VaultWiki plugin for hook "showthread_complete" and remove it. It is not relevant to the Lite version and is responsible for this error. I will upload a new version that has this fixed shortly.

[thincom2000]

Uploaded 4.0.20 Patch Level 1, which includes the following:

• Unsent instant notifications now expire after 7 days
• Fixed VWE-2017-4266, a Denial of Service issue in the wiki's static CSS cache
• Fixed fatal error on some showthread.php pages
• Fixed missing database records for users who registered while add-on was disabled
• Fixed some race conditions
• Over 250 fixes and improvements since last upload for issues that may or may not have been affecting the Lite version

[Dirks]

I only recently upgraded to the newest version. When I click add new page, it's redirecting me to my forum homepage. Where is the page I just created? Do I need to create a forum and call it a page like I did under the old version?

[thincom2000]

Uploaded 4.0.21 Patch Level 1, which includes the following:

• Health information for the Wiki Active setting
• Scalability improvements in clean-up tasks
• Fixed VWE-2018-4471, a Race Condition issue in the wiki's deferred tasks.
• Over 80 fixes and improvements since last upload for issues that may or may not have been affecting the Lite version

[Mikep-]

Hi I am getting the following error on a new install:

Fatal Error: attempted to instantiate non-existent class vw_Plugins_Forum_Model
[path]/vault/core/model/plugins/forum/vw.php does not exist or does not contain the specified class.

#0: vw_Hard_Core::fetch_object() in [path]/vault/core/model/vw.php at line 697
#1: vw_Hard_Core::model() in [path]/global.php(37) : eval()'d code at line 25
#2: eval() in [path]/global.php at line 37
#3: require_once() in [path]/forum.php at line 67
#4: require() in [path]/index.php at line 43

Please forward this error to VaultWiki technical support at https://www.vaultwiki.org/support/4X/ or email [email protected].

[thincom2000]

In the AdminCP, go to the Plugin Manager and look for a VaultWiki-related plugin at hook location "global_setup_complete". Edit the plugin and remove the following code:

Block Disabled:      (Update License Status)
Suspended or Unlicensed Members Cannot View Code.

[Palidino76]

Your website says the current version is 4.0.23, does that mean this version has an exploit?

[nookta]

there is no upload template