Overview Version (1) Discussion (1)

• 

  XenForo Released Full Nulled

  In addition to the usual bug fixes, XenForo 2.3.10 includes a critical security fix involving a pote

  xenforo

  xenforo released

  xemforo nulled
  About this resource

  

  
  

  XenForo 2.3.10 Released

  XenForo 2.3.10 is now available for all licensed customers to download. We strongly recommend that all customers running previous versions of XenForo 2.3 upgrade to this release to benefit from increased stability.
  
  In addition to the usual bug fixes, XenForo 2.3.10 includes a critical security fix involving a potential stored XSS vector in structured text mentions (mostly legacy profile post content). We'd like to extend thanks to metho for responsibly disclosing the issue.
  
  If you are a XenForo Cloud customer running 2.3.8, the security fix has already been applied and no immediate action is required. XenForo 2.3.10 will be made available to you shortly.
  
  We recommend doing a full upgrade to resolve the issue.
  XenForo 2.3.10 also includes a few new features which we called out in our latest Have you seen...? post here:
  
  Some of the changes in XF 2.3.10 include:
  

  • Ensure "View Older Results" link appears on last page of search results
  • Ensure "No such recipient" bounce responses are classified as hard bounces
  • Ensure "Account Closed" bounce responses are classified as hard bounces
  • Ensure "Recipient not found" bounce responses are classified as hard bounces
  • Ensure "mailbox is disabled" bounce responses are classified as hard bounces
  • Ensure "not configured to receive" bounce responses are classified as hard bounces
  • Prevent inet_pton() ValueError when IP address contains null bytes
  • Use original Email object for error logging after DKIM signing to prevent undefined method error
  • Skip array values during custom field multiselect validation to prevent Array to string conversion warning
  • Normalize discouragement delay min/max values to prevent mt_rand() ValueError
  • Suppress dns_get_record() warning during DKIM verification to prevent job crash on DNS failure
  • Prevent alerts from being sent to banned users
  • Correct OAuth2 token revocation to properly invalidate both access and refresh tokens
  • Respect direction parameter for multi-column sort ordering in Finder
  • Re-enable passkey button when WebAuthn registration or authentication is aborted
  • Add missing bookmark_id index to xf_bookmark_label_use table
  • Prevent accumulating whitespace in GenerateFinders CLI command on repeated runs
  • Avoid exception-based flow control in getFinder for entity class resolution
  • Set explicit working directory for sub-processes to prevent failure when CWD is inaccessible
  • Prevent type error when custom field type changes with preserved values
  • Include purchasable ID in Stripe product and plan ID generation
  • ICODE=rich does not round-trip after editing a post
  • Implement ContainableInterface and DatableInterface on various child content entities
  • Create template when generating a route with xf-make:route
  • Current requirements
  • Please note that XenForo 2.3 has higher system requirements than earlier versions.

  
  The following are minimum requirements:
  

  • PHP 7.2 or newer (PHP 8.3 recommended)
  • MySQL 5.7 and newer (Also compatible with MariaDB/Percona etc.)
  • All of the official add-ons require XenForo 2.3.
  • Enhanced Search requires at least Elasticsearch 7.2.
• Version

  2.3.10 Stable Available Mar 7, 2026 · 0

  Download

  File size: 22.2 MB

  SHA-256: 4507352ffd91bd46b52b36f981b41a3f9ebe6e27f7072ffe70eef809f4b4cd62

  SHA-256 verified Package valid Compatibility checked Last verified: Wednesday at 12:10 AM

  View attachment 5521​

  
  

  XenForo 2.3.10 Released

  XenForo 2.3.10 is now available for all licensed customers to download. We strongly recommend that all customers running previous versions of XenForo 2.3 upgrade to this release to benefit from increased stability.
  
  In addition to the usual bug fixes, XenForo 2.3.10 includes a critical security fix involving a potential stored XSS vector in structured text mentions (mostly legacy profile post content). We'd like to extend thanks to metho for responsibly disclosing the issue.
  
  If you are a XenForo Cloud customer running 2.3.8, the security fix has already been applied and no immediate action is required. XenForo 2.3.10 will be made available to you shortly.
  
  We recommend doing a full upgrade to resolve the issue.
  XenForo 2.3.10 also includes a few new features which we called out in our latest Have you seen...? post here:
  
  Some of the changes in XF 2.3.10 include:
  

  • Ensure "View Older Results" link appears on last page of search results
  • Ensure "No such recipient" bounce responses are classified as hard bounces
  • Ensure "Account Closed" bounce responses are classified as hard bounces
  • Ensure "Recipient not found" bounce responses are classified as hard bounces
  • Ensure "mailbox is disabled" bounce responses are classified as hard bounces
  • Ensure "not configured to receive" bounce responses are classified as hard bounces
  • Prevent inet_pton() ValueError when IP address contains null bytes
  • Use original Email object for error logging after DKIM signing to prevent undefined method error
  • Skip array values during custom field multiselect validation to prevent Array to string conversion warning
  • Normalize discouragement delay min/max values to prevent mt_rand() ValueError
  • Suppress dns_get_record() warning during DKIM verification to prevent job crash on DNS failure
  • Prevent alerts from being sent to banned users
  • Correct OAuth2 token revocation to properly invalidate both access and refresh tokens
  • Respect direction parameter for multi-column sort ordering in Finder
  • Re-enable passkey button when WebAuthn registration or authentication is aborted
  • Add missing bookmark_id index to xf_bookmark_label_use table
  • Prevent accumulating whitespace in GenerateFinders CLI command on repeated runs
  • Avoid exception-based flow control in getFinder for entity class resolution
  • Set explicit working directory for sub-processes to prevent failure when CWD is inaccessible
  • Prevent type error when custom field type changes with preserved values
  • Include purchasable ID in Stripe product and plan ID generation
  • ICODE=rich does not round-trip after editing a post
  • Implement ContainableInterface and DatableInterface on various child content entities
  • Create template when generating a route with xf-make:route
  • Current requirements
  • Please note that XenForo 2.3 has higher system requirements than earlier versions.

  
  The following are minimum requirements:
  

  • PHP 7.2 or newer (PHP 8.3 recommended)
  • MySQL 5.7 and newer (Also compatible with MariaDB/Percona etc.)
  • All of the official add-ons require XenForo 2.3.
  • Enhanced Search requires at least Elasticsearch 7.2.
• Discussion

  This resource has a discussion thread on the forum where you can ask questions, report issues, and talk with the author and other users.

  Join the discussion (1)