Two critical vulnerabilities have been patched in MODx Revolution 2.6.5 that affect all prior releases. Upgrades should be performed immediately because the vulnerabilities allow remote script execution and file/directory removal. More details here:

https://modx.com/blog/modx-revolutio...is-post-559515