We recently released some minor updates to Simple:Press and a couple of related plugins. One update included a security fix that was responsibly reported by Blaise Fiedler on behalf of fotoloco.fr.
In total 3 plugins were updated. Here is a summary of those updates:
Simple:Press Core: New version 126.96.36.199
Fix: Security Vulnerability that could allow one user to delete posts from another user when submitting a specially crafted post request.
Threading: New Version 1.9.3
Fix: Latest threaded post not always appearing in forum view as most recent.
Warnings and Suspensions: New Version 1.2.3
Fix: Admin panels (other than Options) not opening.
Fix: Footer variable (setting) not passed into admin JS loading.