11 November 2013
webtrees version 1.4.4 is now available (security release).Upgrading to webtrees 1.4.4
webtrees 1.4.4 can be upgraded to (or installed) using any of Installatron's products. Use Installatron's optional Automatic Update feature to automatically apply webtrees updates as new versions are released, or use Installatron's Clone feature to duplicate an existing webtrees install to test the 1.4.4 upgrade prior to applying it live. Get started managing your webtrees installations with InstallatronWhat's New in webtrees 1.4.4
This is a security release. It has been discovered that webtrees versions 1.4.3 and earlier are vulnerable to a type of attack known as "cross-site request forgery". If you are logged into your own site, and you then visit a malicious website controlled by an attacker, the attacker will be able to perform certain actions on your behalf. These include: creating user accounts, uploading media, changing content, etc..