Version 9.0.9 (Maintenance Release)
Implemented

    WHMCS-26614 — Improved caching of MarketConnect service data

Maintenance

    WHMCS-28262 — Improved ordering of services on the admin MarketConnect page

Modules

    WHMCS-27404 — Update to XML RPC protocol version to 1.6.9.1 in Plesk
	
Version 9.0.8 (Maintenance Release)
Maintenance

    WHMCS-27923 — Security Fix for CVE-2026-67399

Modules

    WHMCS-27404 — Resolved integration errors related to the Plesk server module
    WHMCS-27532 — Update Suspension and Unsuspension in Plesk
    WHMCS-27812 — Update Change Password in Plesk
    WHMCS-27908 — Security Fix for CVE-2026-67398
	
Version 9.0.7 (Maintenance Release)
Implemented

    WHMCS-26198 — IP allow list for cron task invocation via HTTP request

Maintenance

    WHMCS-25637 — Improved security around email previews
    WHMCS-26193 — Undisclosed Security Fix
    WHMCS-26201 — Update the jms/serializer library
    WHMCS-26284 — Add System Health Check notice if deprecated modules are found
    WHMCS-26336 — Improved handling of Invoice Creation Hook when merging Invoices.
    WHMCS-26382 — Undisclosed Security Fix
    WHMCS-26464 — Block direct access to email campaign and hidden Knowledgebase image attachments
    WHMCS-26502 — Undisclosed Security Fix
    WHMCS-26653 — Resolve ArgumentCountError error on 360 Monitoring Landing page
    WHMCS-27325 — Improve handling of invalid data during null-IV migration

Modules

    WHMCS-26200 — Improved encryption method for callbacks in GoCardless
    WHMCS-26360 — Undisclosed Security Fix
    WHMCS-26381 — Improved security for paying invoices with PayPal Payments
    WHMCS-26480 — Remove Hipchat Notification Module
    WHMCS-27149 — Undisclosed Security Fix
    WHMCS-27204 — Improved payment capture logic in Admin Area for Stripe Dynamic Payment Gateway
	
Version 9.0.6 (Maintenance Release)
Maintenance

    WHMCS-25193 — Define a default region for S3-compatible Storage Providers
    WHMCS-25216 — Correct invoice chunking logic
    WHMCS-25397 — Improved error handling for ReCaptcha v2 and v3
    WHMCS-26068 — Undisclosed Security Fix
    WHMCS-26192 — Improved security around Admin password resets.
    WHMCS-26194 — Improved security around User password resets.
    WHMCS-26206 — Improved security around Invoice processing Hook Points
    WHMCS-26338 — Improved security around User logouts.
    WHMCS-26339 — Admins require “View Clients Summary” permission to download client files
    WHMCS-26425 — Undisclosed Security Fix
    WHMCS-26466 — Persist Sign-In Integration notice when appropriate
    WHMCS-26624 — Undisclosed Security Fix

Modules

    WHMCS-24791 — Improved security for paying invoices with Stripe
    WHMCS-26067 — Improved security for paying invoices with PayPal Basic
    WHMCS-26381 — Improved security for paying invoices with PayPal Payments
    WHMCS-26444 — Improved security of logging in WorldPay FuturePay
    WHMCS-26566 — Corrected variable name for Enom