A security patch released for Magento CE <= 220.127.116.11 / EE <= 18.104.22.168
This security patch was originally released on January 20th 2016 and addresses multiple security vulnerability issues affecting Magento CE versions <= 22.214.171.124 as well as Magento EE versions <= 126.96.36.199.
An update to this patch has been released on February 26th 2016 to address several issues that were caused by the original version of the patch.
The patch can be downloaded here: https://www.magentocommerce.com/download
Please note that both versions of the patch need to be applied:
- SUPEE-7405 V1.0
- SUPEE-7405 V1.1
Magento CE 188.8.131.52 provides SUPEE-7405 V1.0 and CE 184.108.40.206 provides SUPEE-7405 V1.1
Magento EE 220.127.116.11 provides SUPEE-7405 V1.0 and EE 18.104.22.168 provides SUPEE-7405 V1.1
Details about the patch can be found here: Security Patch SUPEE-7405 - possible problems?