Two critical vulnerabilities have been patched in MODx Revolution 2.6.5 that affect all prior releases. Upgrades should be performed immediately because the vulnerabilities allow remote script execution and file/directory removal. More details here:

MODX Revolution 2.6.5 was published on July 12, 2018, featuring fixes for 2 critical security issues. Upgrades are mandatory.