XenForo 2.3.10 was released in early March 2026 and includes important security fixes, new developer tools, and a range of stability improvements across the core software and official add-ons.
The headline change is a critical security patch for a stored XSS vulnerability, so upgrading is strongly recommended for everyone on the 2.3 branch. This release also introduces new phrase management CLI tools for developers, making it easier to convert hard-coded text into phrases in templates and add-on files.
It also brings several useful fixes behind the scenes, including improvements to OAuth token revocation, passkey handling, DKIM error processing, banned-user alert behavior, and other core stability issues.
The official add-ons were updated too. XenForo Media Gallery now includes lazy loading for gallery images, pagination for category content API endpoints, and better album tracking. XenForo Resource Manager also received updates to rating calculations and structured data output.
The headline change is a critical security patch for a stored XSS vulnerability, so upgrading is strongly recommended for everyone on the 2.3 branch. This release also introduces new phrase management CLI tools for developers, making it easier to convert hard-coded text into phrases in templates and add-on files.
It also brings several useful fixes behind the scenes, including improvements to OAuth token revocation, passkey handling, DKIM error processing, banned-user alert behavior, and other core stability issues.
The official add-ons were updated too. XenForo Media Gallery now includes lazy loading for gallery images, pagination for category content API endpoints, and better album tracking. XenForo Resource Manager also received updates to rating calculations and structured data output.
