A security patch released for Magento CE <= 184.108.40.206 / EE <= 220.127.116.11
This security patch was originally released on January 20th 2016 and addresses multiple security vulnerability issues affecting Magento CE versions <= 18.104.22.168 as well as Magento EE versions <= 22.214.171.124.
An update to this patch has been released on February 26th 2016 to address several issues that were caused by the original version of the patch.
The patch can be downloaded here: https://www.magentocommerce.com/download
Please note that both versions of the patch need to be applied:
- SUPEE-7405 V1.0
- SUPEE-7405 V1.1
Magento CE 126.96.36.199 provides SUPEE-7405 V1.0 and CE 188.8.131.52 provides SUPEE-7405 V1.1
Magento EE 184.108.40.206 provides SUPEE-7405 V1.0 and EE 220.127.116.11 provides SUPEE-7405 V1.1
Details about the patch can be found here: Security Patch SUPEE-7405 - possible problems?