# Security Advisory - HostBill versions 4.x

- URL: https://blog.hostbillapp.com/2013/06/11/security-advisory-hostbill-versions-4-x/
- Published: 2013-06-11 (updated 2020-04-14)
- Author: HostBill Team
- Categories: Announcements
- Tags: security

> In the last couple hours we’ve released patch for HostBill versions 4.x available from auto-update plugin and to download directly from…

In the last couple hours we’ve released patch for HostBill versions 4.x available from [auto-update plugin](https://hostbillapp.com/feature/auto-updater/) and to download directly from:

**[https://hostbillapp.com/clientarea/patches/hostbill_patch4.6.4_4347.zip](https://hostbillapp.com/clientarea/patches/hostbill_patch4.6.4_4347.zip)**

For manual patch apply please extract archive contents in main HostBill directory.

We strongly recommend upgrading to the latest HostBill version (4.6.4 – archive also contains patched files)

**Patched vulnerability**

We’ve been notified about brute-force attack possible to be performed by logged in customers into other client’s accounts.

Patch was introduced immediately for auto-upgrade feature.
