We have released a software upgrade that includes important security fixes. If you're using the Roundcube Plus plugins we urge you to download the latest version and upgrade as soon as you can. Besides fixing the security issues, we also fixed a few UI problems, upgraded the third party libraries, added some new functionality and new translations. The file upload functions will now re-save the images to reduce their size on the server; you'll be able to give your customers a limited access to their own Roundcube configuration files; and if you're planning to upgrade to Roundcube 1.3.10 released a few days ago, you can rest assured that the skins and plugins will work properly.
Important changes introduced in the latest upgrade: