bbPress 2.5.9 is out, and is a security release for all previous 2.x versions. bbPress versions 2.5.8 and earlier are susceptible to a form of cross-site-scripting, due to the way users are linked to their profiles when they are mentioned in topics and replies. If youโre using any version of bbPress 2.x and have not yet updated, please [โฆ]
