Keep Your Website Secure The MODX Team / Updated: June 11, 2026 MODX setup/ Directory Site Exploit Ryan Thrash / April 24, 2019 Revolution 2.6.4 and Prior Two Cricital Vulnerabilities; Upgrade Mandatory/Patch Jay Gilmore / July 12, 2018 Revolution 2.5.1 and Prior Multiple Vulnerabilites Jay Gilmore / November 14, 2016 Evolution 1.1 and Prior Remote Execution Jay Gilmore / November 12, 2016 Critical Login XSS+CSRF Revolution 2.2.1.4 and Prior Jay Gilmore / July 15, 2014 Important Update to AjaxSearch Exploit in Evo 1.0.13 (and prior) Jay Gilmore / June 12, 2014 MODX Evolution 1.0.13 (and prior) AjaxSearch Vulnerability Jason Coward / June 5, 2014 MODX Revolution 2.2.13 (and prior) Blind SQL Injection Jay Gilmore / April 4, 2014 MODX Revolution 2.X SQL Injection Jay Gilmore / March 14, 2014 MODX Revolution Security Bypass and Remote Execution Jay Gilmore / June 4, 2013 MODX Evolution 1.0.7 (and prior) ForgotManager plugin Vulnerability Jay Gilmore / January 18, 2013 MODX Evolution 1.0.6 (and prior) Unauthorized Manager Access Jay Gilmore / November 26, 2012 Want to write for or publish on Exploring MODX? Contact the editor