Latest News
Stay up to date with the latest updates, releases, and announcements from Roundcube +
Security Plugin Update
Security advisory: PHP2Shell and Roundcube Plus
Security advisory: PHP2Shell (CVE-2026-109618 / CVE-2026-109619) and what Roundcube Plus users need to do.On October 21, PHP released security updates for two critical vulnerabilities, known as…
Plugin Update Plugin Release
October Plugin Upgrade: Calendar Improvements and Important Fixes
The new version of the calendar plugin lets users accept invitations into their CalDAV calendars and see up to 14 days of upcoming events in the sidebar. It also fixes invitation responses and the sunrise and sunset times, together with fixes to the Weather and Framework plugins.
Plugin Update
Roundcube Plus Plugin Maintenance Update – September 2026
Maintenance updates for Calendar, WebDAV, 2FA, Email Scheduler, and Framework plugins, with reliability improvements, bug fixes, and updated AJAX handling.
Plugin Update Security
September Plugin Upgrade: Security, Reliability, and Improvements
Major Roundcube Plus plugin updates with security fixes, Roundcube 1.7 improvements, better validation, and numerous reliability and UI enhancements.
Security Plugin Update
2FA Plugin Update and PHP 8.0+ Requirement
The Roundcube Plus 2FA plugin has been updated with WebAuthn support, adding passkeys, FIDO2 security keys, and platform authenticators such as Touch ID, Windows Hello, and Android biometrics. This release also raises the PHP requirement for all Roundcube Plus plugins to PHP 8.0 or later.
Plugin Update Security
Calendar 2.4: Important Security Upgrade
Version 2.4 of the Roundcube Plus Calendar plugin is now available. This major upgrade closes a large number of security issues found during a thorough audit, rebuilds the front end on the modern Alpine.js framework, updates FullCalendar to the latest version, and fixes a wide range of functionality bugs. If you're running an earlier version, we recommend upgrading as soon as possible.
Plugin Update
Maintenance Updates for Several Roundcube Plus Plugins
Maintenance updates are now available for several Roundcube Plus plugins, including the Email Scheduler, Last Login, Dropbox, and AI Assistant plugins. These are smaller updates that fix bugs and address a few rough edges.
Plugin Update Security
Roundcube 1.7 Compatibility Release
All Roundcube Plus plugins and skins are now compatible with Roundcube 1.7, released on May 10. Customers running 1.7, or planning to upgrade, can access the latest download from the customer area.
Security Plugin Update
Major Upgrade: Compatibility, Security Hardening, and More
We've just released our largest upgrade to the Roundcube plugins and skins. The main focus of this upgrade is ensuring compatibility with the latest Roundcube 1.7 and crucial fixes in many plugins following an extensive security audit. In addition, the release brings updated dependencies, new functionality, and a range of bug fixes and improvements. Read more...
Plugin Update Security
December Release: Year-End Plugin Upgrades and Fixes
The latest software upgrade includes fixes and improvements to several plugins: The Framework plugin received the most enhancements, including compatibility for managing static assets on Roundcube 1.7 beta, optimizations for faster loading, an update to the latest IP-to-country database, fixes for link insertions from the Google Drive, Dropbox, and WebDAV plugins in the compose editor, and corrections to multidomain configuration loading. Read more...
