Users running a non-download version of Vanilla (pulled from github), on branch release/2019.016 or master from the last 2 weeks should upgrade to release/2019.017 or latest master for security reasons. Downloaded official open sources releases are not affected.
reCAPTCHA

Getting message: reCAPTCHA has not been set up by the site administrator in registration settings. This is required to register when set to basic. The link to get it does not work. Also, that is only required when it is set on BASIC. Changing it to "approval" . . . still does not remove reCAPTCHA from the register page. Got version 2.3.1 from Mojomarketplace, through JustHost.com
0
Comments
Vanilla 2.3 has security issues, don't use it. See here: https://open.vanillaforums.com/discussion/36699/new-critical-security-update-vanilla-2-6-3#latest
Download the most current version from this page.